CVE-2024-0002: Purestorage Purity//fa

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

Affected products

• Purestorage Purity//fa: from 5.3.17, up to and including 5.3.21; from 6.0.7, up to and including 6.0.9; from 6.1.8, up to and including 6.1.25; from 6.2.0, up to and including 6.2.17; from 6.3.0, up to and including 6.3.14; from 6.4.0, up to and including 6.4.10; …

Published 2024-09-23. Last modified 2026-06-17.