Lucene search

[email protected]CVE-2002-0250

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0250

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

hp advancestack

firmware a.03.07

bypass authentication

http request

cve-2002-0250

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch’s configuration and modify the administrator password.

Affected configurations

NVD

Node

hpadvancestack_10base-t_switching_hub_j3200aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3201aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3202aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3203aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3204aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3205aMatcha.03.07

hpadvancestack_10base-t_switching_hub_j3210aMatcha.03.07

CPENameOperatorVersion
hp:advancestack_10base-t_switching_hub_j3200ahp advancestack 10base-t switching hub j3200aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3201ahp advancestack 10base-t switching hub j3201aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3202ahp advancestack 10base-t switching hub j3202aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3203ahp advancestack 10base-t switching hub j3203aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3204ahp advancestack 10base-t switching hub j3204aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3205ahp advancestack 10base-t switching hub j3205aeqa.03.07
hp:advancestack_10base-t_switching_hub_j3210ahp advancestack 10base-t switching hub j3210aeqa.03.07

CPE	Name	Operator	Version
hp:advancestack_10base-t_switching_hub_j3200a	hp advancestack 10base-t switching hub j3200a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3201a	hp advancestack 10base-t switching hub j3201a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3202a	hp advancestack 10base-t switching hub j3202a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3203a	hp advancestack 10base-t switching hub j3203a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3204a	hp advancestack 10base-t switching hub j3204a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3205a	hp advancestack 10base-t switching hub j3205a	eq	a.03.07
hp:advancestack_10base-t_switching_hub_j3210a	hp advancestack 10base-t switching hub j3210a	eq	a.03.07

References

marc.info/?l=bugtraq&m=101318469216213&w=2

online.securityfocus.com/advisories/3870

www.iss.net/security_center/static/8124.php

www.securityfocus.com/bid/4062

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON

Related for CVE-2002-0250

nvd1 cvelist1