CVE-2024-0003
Purestorage
CVE-2024-0003 is a critical vulnerability in FlashArray Purity. It allows a remote, malicious user to create an account with privileged access, potentially leading to full system compromise. The SVRS score of 66 indicates a substantial risk, suggesting that while not immediately critical (above 80), it warrants close monitoring and mitigation efforts. This vulnerability allows unauthorized account creation via a remote administrative service. Exploitation could enable attackers to gain complete control over the FlashArray, leading to data breaches, system outages, or further lateral movement within a network. The presence of the "In The Wild" tag elevates the urgency. This indicates that the vulnerability is known to be exploited in real-world attacks, requiring administrators to prioritize patching or implementing mitigating measures to prevent potential exploitation of their systems and data.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.