7.1
CVSSv2

CVE-2002-1147

Published: 11/10/2002 Updated: 18/10/2016
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 715
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote malicious users to cause a denial of service via a direct request to the device_reset CGI program.

Vulnerable Product Search on Vulmon Subscribe to Product

hp procurve switch 4000m

Exploits

source: wwwsecurityfocuscom/bid/5784/info When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via the web It has been reported that HP Procurve Switches are vulnerable to a denial of service attack, when us ...