CVE-2024-0005: Purestorage Purity//fa

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Affected products

• Purestorage Purity//fa: from 5.0.0, up to and including 5.0.11; from 5.1.0, up to and including 5.1.17; from 5.2.0, up to and including 5.2.7; from 5.3.0, up to and including 5.3.21; from 6.0.0, up to and including 6.0.9; from 6.1.0, up to and including 6.1.25; …
• Purestorage Purity//fb: from 3.0.0, up to and including 3.0.9; from 3.1.0, up to and including 3.1.5; from 3.2.0, up to and including 3.2.10; from 3.3.0, up to and including 3.3.11; from 4.0.0, up to and including 4.0.6; from 4.1.0, up to and including 4.1.10; …

Published 2024-09-23. Last modified 2026-06-17.