Vulnerability in Hp Advancestack 10base-T Switching Hub J3200a
CVE-2002-0250
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Hp Advancestack_10base-t_switching_hub_j3200a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3201a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3202a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3203a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3204a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3205a — versions a.03.07
- Hp Advancestack_10base-t_switching_hub_j3210a — versions a.03.07
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, x_refsource_HP, vendor-advisory, Patch)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)