CVE-2012-2986

HIGH 7.7CVE-2012-2986 · Published 20/08/2012 · updated 16/06/2026

In short

CVE-2012-2986 is a HIGH (CVSS 7.7) vulnerability affecting san/iq (hp).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
san/iq hp	`= 9.5`	No fix yet

Description

lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.

References

kb.cert.org/vuls/id/441363 · US Government Resource

More vulnerabilities in san/iq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free