Medium severity6.4NVD Advisory· Published Apr 17, 2020· Updated Jun 17, 2026

CVE-2019-12001

Description

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

Affected products

HPE/Msa 1040 Firmware
cpe:2.3:o:hpe:msa_1040_firmware:*:*:*:*:*:*:*:*
Range: <=gl225p001
HPE/Msa 1050 Firmware
cpe:2.3:o:hpe:msa_1050_firmware:*:*:*:*:*:*:*:*
Range: <=ve270r001-01
HPE/Msa 2040 Firmware
cpe:2.3:o:hpe:msa_2040_firmware:*:*:*:*:*:*:*:*
Range: <=gl225p001
HPE/Msa 2042 Firmware
cpe:2.3:o:hpe:msa_2042_firmware:*:*:*:*:*:*:*:*
Range: <=gl225p001
HPE/Msa 2050 Firmware
cpe:2.3:o:hpe:msa_2050_firmware:*:*:*:*:*:*:*:*
Range: <=vl270r001-01
HPE/Msa 2052 Firmware
cpe:2.3:o:hpe:msa_2052_firmware:*:*:*:*:*:*:*:*
Range: <=vl270r001-01
HPE/MSA 2040 SAN Storagellm-fuzzy
Range: <=GL225P001
HPE/MSA 1040 SAN Storagellm-fuzzy
Range: <=GL225P001
HPE/MSA 1050 SAN Storagellm-fuzzy
Range: <=GL225P001

cvss	0.416
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-12001

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions