CVE-2011-4788: HP Storageworks p2000 g3 Msa Fc/iscsi Dual Combo Controller Lff Array System

High severity, CVSS 7.8. EPSS: 4.9% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

Affected products

• HP Storageworks p2000 g3 Msa Fc/iscsi Dual Combo Controller Lff Array System: version aw567a only
• HP Storageworks p2000 g3 Msa Fibre Channel Dual Controller Lff Array System: version ap845a only
• HP Storageworks p2000 g3 Msa Fibre Channel Dual Controller Sff Array System: version ap846a only

Published 2012-01-13. Last modified 2026-06-16.