What’s Vulnerable › Vulnerabilities

CVE-2019-12002

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-17 · updated 2026-06-17

Description

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

Affected products

• HPE Msa 1040 Firmware: through gl225p001
• HPE Msa 1050 Firmware: through ve270r001-01
• HPE Msa 2040 Firmware: through gl225p001
• HPE Msa 2042 Firmware: through gl225p001
• HPE Msa 2050 Firmware: through vl270r001-01
• HPE Msa 2052 Firmware: through vl270r001-01

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us

Get alerted when CVE-2019-12002 or the next vulnerability affects your stack