EUVD-2010-3012

Malware in sbrugna...

CVE-2013-4806: Undefined Security Weakness

The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...

PT-2013-5205

Name of the Vulnerable Software and Affected Versions HP JD9A routers version affected versions not specified HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches version affected versions not specified HP 3COM routers and switches version affected versions not specified HP H3C routers and switches...

CVE-2013-2340

Unspecified vulnerability on the HP ProCurve JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors...

CVE-2013-2341

Unspecified vulnerability on the HP ProCurve JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote authenticated users to execute arbitrary code or obtain sensitive information via unknown vectors...

CVE-2013-2340: Undefined Security Weakness

Unspecified vulnerability on the HP ProCurve JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors...

CVE-2013-2341: Undefined Security Weakness

Unspecified vulnerability on the HP ProCurve JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote authenticated users to execute arbitrary code or obtain sensitive information via unknown vectors...

PT-2013-3684

Name of the Vulnerable Software and Affected Versions HP ProCurve versions of JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21 HP 3COM routers and switches affected versions not specified HP H3C routers and switches affected versions not specified Description The issue allo...

PT-2013-3683

Name of the Vulnerable Software and Affected Versions HP ProCurve versions affected versions not specified HP 3COM routers and switches affected versions not specified HP H3C routers and switches affected versions not specified Description The issue allows remote attackers to execute arbitrary co...

CVE-2012-3268: Insufficiently Protected Credentials

Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei...

PT-2013-1583

Name of the Vulnerable Software and Affected Versions HP Access Controller versions affected versions not specified HP Fabric Module versions affected versions not specified HP Firewall versions affected versions not specified HP Router versions affected versions not specified HP Switch versions...

ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability

ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcodetable Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-165 May 10, 2011 -- CVE ID: CVE-2011-1853 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-164 May 10, 2011 -- CVE ID: CVE-2011-1852 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When...

HP 3COM/H3C Intelligent Management Center img Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

CVE-2010-3010

Cross-site scripting XSS vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage SMH was originally...

Cross site scripting

Cross-site scripting XSS vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage SMH was originally...