HP Msa 1040 San Storage Firmware vulnerabilities

2 CVEs affecting HP Msa 1040 San Storage Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8960, published 2018-02-15.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8960, published 2018-02-15. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found.
• CVE-2017-8959, published 2018-02-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found.