A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• purestorage purity//fa5.0.0 and later · up to 5.0.11 inclusive
• purestorage purity//fa5.1.0 and later · up to 5.1.17 inclusive
• purestorage purity//fa5.2.0 and later · up to 5.2.7 inclusive
• purestorage purity//fa5.3.0 and later · up to 5.3.21 inclusive
• purestorage purity//fa6.0.0 and later · up to 6.0.9 inclusive
• purestorage purity//fa6.1.0 and later · up to 6.1.25 inclusive
• purestorage purity//fa6.2.0 and later · up to 6.2.17 inclusive
• purestorage purity//fa6.3.0 and later · up to 6.3.14 inclusive
• purestorage purity//fa6.4.0 and later · up to 6.4.10 inclusive
• purestorage purity//fa6.5.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (PureStorage). Independent of NVD's CPE analysis and usually ahead of it.

• PureStorage FlashArray

  • 6.5.0affected
  • 5.0.0 and later · up to and including 5.0.11affected
  • 5.1.0 and later · up to and including 5.1.17affected
  • 5.2.0 and later · up to and including 5.2.7affected
  • 5.3.0 and later · up to and including 5.3.21affected
  • 6.0.0 and later · up to and including 6.0.9affected
  • 6.1.0 and later · up to and including 6.1.25affected
  • 6.2.0 and later · up to and including 6.2.17affected
  • 6.3.0 and later · up to and including 6.3.14affected
  • 6.4.0 and later · up to and including 6.4.10affected

Other highest-scoring records for the same primary product.

• CVE-2024-0002A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
  39Monitor
• CVE-2024-0001A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing
  39Monitor
• CVE-2022-32554Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA
  39Monitor
• CVE-2024-0005A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specific
  35Monitor
• CVE-2023-36628Privilege Escalation in VASA
  35Monitor
• CVE-2022-32553Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.