Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-0005

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PureStorage

Description

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PureStorage FlashArray

Default version status: unaffected

  • 5.0.0 to ≤ 5.0.11affected
  • 5.1.0 to ≤ 5.1.17affected
  • 5.2.0 to ≤ 5.2.7affected
  • 5.3.0 to ≤ 5.3.21affected
  • 6.0.0 to ≤ 6.0.9affected
  • 6.1.0 to ≤ 6.1.25affected
  • 6.2.0 to ≤ 6.2.17affected
  • 6.3.0 to ≤ 6.3.14affected
  • 6.4.0 to ≤ 6.4.10affected
  • 6.5.0affected
  • 6.6.0affected

PureStorage FlashBlade

Default version status: unaffected

  • 3.0.0 to ≤ 3.0.9affected
  • 3.1.0 to ≤ 3.1.15affected
  • 3.2.0 to ≤ 3.2.10affected
  • 3.3.0 to ≤ 3.3.11affected
  • 4.0.0 to ≤ 4.0.6affected
  • 4.1.0 to ≤ 4.1.10affected
  • 4.2.0 to ≤ 4.2.3affected
  • 4.3.0 to ≤ 4.3.1affected

References