CVE-2011-4157: HP Centralized Management Console Software

High severity, CVSS 10.0. EPSS: 13.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.

Affected products

• HP Centralized Management Console Software: up to and including 9.0; version 7.0.01 only; version 8.0 only; version 8.1 only; version 8.5 only
• HP San/iq: up to and including 9.0; version 8.0 only; version 8.1 only; version 8.5 only
• HP Storageworks p4000 Virtual San Appliance

Published 2011-11-16. Last modified 2026-06-16.