CVE-2013-4841

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-26 · updated 2026-06-16

Description

Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509.

Affected products

Hewlett Packard Enterprise StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS: through 10.5; 8.1, 8.5, 9.0, 9.5, 10
HP Storevirtual 4000: all versions
HP Storevirtual Virtual Storage Appliance: all versions

References

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204

Get alerted when CVE-2013-4841 or the next vulnerability affects your stack