A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN…

Description

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

Scores

EPSS (exploitation in 30 days)

2.2% · top 17% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

• Remote: Session Reuse

Affected products

• HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage

  • affected HPE MSA 1040 SAN Storage GL225P001 and earlier
  • affected HPE MSA 2040 SAN Storage GL225P001 and earlier
  • affected HPE MSA 2042 SAN Storage GL225P001 and earlier
  • affected HPE MSA 1050 SAN Storage VE270R001-01 and earlier
  • affected HPE MSA 2050 SAN Storage VL270R001-01 and earlier
  • affected HPE MSA 2052 SAN Storage VL270R001-01 and earlier

References (1)

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-12002](https://trackcve.app/badge/CVE-2019-12002.svg)](https://trackcve.app/cve/CVE-2019-12002)

Record last updated 4 Aug 2024, 23:10 UTC.