Critical severity9.8NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026

CVE-2021-26588

Description

A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An unauthenticated user could remotely exploit the low complexity issue to execute code as administrator. This vulnerability impacts completely the confidentiality, integrity, availability of the array. HPE has made the following software updates and mitigation information to resolve the vulnerability in 3PAR, Primera and Alletra 9000 firmware.

Affected products

HPE/3par OS4 versions
cpe:2.3:o:hpe:3par_os:3.3.1_mp5_p156:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:hpe:3par_os:3.3.1_mp5_p156:*:*:*:*:*:*:*
- cpe:2.3:o:hpe:3par_os:3.3.1_mu1:*:*:*:*:*:*:*
- cpe:2.3:o:hpe:3par_os:3.3.1_mu2_p157:*:*:*:*:*:*:*
- cpe:2.3:o:hpe:3par_os:3.3.2_ga_p_01:*:*:*:*:*:*:*
HPE/Alletra 9060 Firmware
cpe:2.3:o:hpe:alletra_9060_firmware:*:*:*:*:*:*:*:*
Range: >=9.3.0,<=9.4.0
HPE/Alletra 9080 Firmware
cpe:2.3:o:hpe:alletra_9080_firmware:*:*:*:*:*:*:*:*
Range: >=9.3.0,<=9.4.0
HPE/Primera 630 Firmware
cpe:2.3:o:hpe:primera_630_firmware:*:*:*:*:*:*:*:*
Range: >=4.0.0,<=4.3.3
HPE/Primera 650 Firmware
cpe:2.3:o:hpe:primera_650_firmware:*:*:*:*:*:*:*:*
Range: >=4.0.0,<=4.3.3
HPE/Primera 670 Firmware
cpe:2.3:o:hpe:primera_670_firmware:*:*:*:*:*:*:*:*
Range: >=4.0.0,<=4.3.3
HPE/3PAR, Primera and Alletra 9000 firmwaredescription
HPE/3PAR StoreServllm-fuzzy
HPE/Primera Storagellm-fuzzy
HPE/Alletra 9000 Storagellm-fuzzy

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-26588

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions