CVE-2012-4362

CVE-2012-4362 describes a hardcoded password vulnerability in hydra.exe within HP SAN/iQ before version 9.5 on the HP Virtual SAN Appliance. This flaw allows remote attackers to gain access to a management service by using the static password "L0CAlu53R" for the global$agent account via a login request to TCP port 13838. The vulnerability has a CVSS score of 4.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity, requiring only single authentication to achieve partial integrity impact, though confidentiality and availability are not directly affected. While not listed on the CISA KEV catalog, exploit code is publicly available on ExploitDB, including Metasploit modules for remote command execution. Despite this, there is no recorded community discussion or media coverage, suggesting limited public attention or active exploitation.