VulnerabilityModified

CVE-2009-2680

HIGH 8.5EPSS 3.22%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors.

CVSS 2.0: 8.5 HIGHAV:N/AC:L/Au:N/C:N/I:P/A:C
EPSS: 3.22% probability · 88th percentile
CISA KEV: Not listed
Affected: hp/storageworks 1\/8 g2 tape autoloader · hp/storageworks msl2024 tape library · hp/storageworks msl4048 tape library · hp/storageworks msl8096 tape library
Source: cve@mitre.org

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405Patch, Vendor Advisory
http://secunia.com/advisories/36764Vendor Advisory
http://securitytracker.com/id?1022905
http://www.osvdb.org/58131
http://www.securityfocus.com/bid/36388
http://www.vupen.com/english/advisories/2009/2662Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53237
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405Patch, Vendor Advisory
http://secunia.com/advisories/36764Vendor Advisory
http://securitytracker.com/id?1022905
http://www.osvdb.org/58131
http://www.securityfocus.com/bid/36388
http://www.vupen.com/english/advisories/2009/2662Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53237

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.