7.5
CVSSv2

CVE-2002-0250

Published: 29/05/2002 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and previous versions, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Vulnerable Product Search on Vulmon Subscribe to Product

hp advancestack 10base-t switching hub j3203a a.03.07

hp advancestack 10base-t switching hub j3204a a.03.07

hp advancestack 10base-t switching hub j3200a a.03.07

hp advancestack 10base-t switching hub j3201a a.03.07

hp advancestack 10base-t switching hub j3202a a.03.07

hp advancestack 10base-t switching hub j3205a a.03.07

hp advancestack 10base-t switching hub j3210a a.03.07

Exploits

source: wwwsecurityfocuscom/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypassed by an unprivileged user who accesses one of the administrative web pages directly The attacker ...