A security issue has been reported in HP StorageWorks Modular Smart Array P2000, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to the appliance including an undocumented "admin" account with default credentials, which can be exploited to gain access to the management interface of an affected device.

The security issue is reported in HP StorageWorks Modular Smart Array P2000 G3 FC with firmware version TS201R015. Other versions may also be affected.

Solution
Apply the workaround (please see the vendor's advisory for details).

Provided and/or discovered by
hpdisclosure(at)anonmail(dot)de

Changelog
Further details available to Secunia VIM customers

Original Advisory
hpdisclosure(at)anonmail(dot)de:
http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html

HPSBST02620 SSRT100356:
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02660754

Deep Links
Links available to Secunia VIM customers