← Back to browse · API

CVE-2024-0001

Severity
CRITICAL
CVSS
10.0
EPSS
0.00949
Risk score
40.33
CISA KEV
No
PoC
No
Published
2024-09-23
Modified
2024-09-23
First seen
2026-08-07
Aliases
EUVD-2024-15804, GHSA-CPJ4-MRCC-FC7H
Products
PureStorage:FlashArray 6.3.0 ≤6.3.14, PureStorage:FlashArray 6.4.0 ≤6.4.10
Sources
euvd EUVD-2024-15804

Description

A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.

References