Lucene search
HistoryMay 29, 2002 - 4:00 a.m.
CVE-2002-0250
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.015
Percentile
86.9%
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch’s configuration and modify the administrator password.
Affected configurations
Node
hpadvancestack_10base-t_switching_hub_j3200aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3201aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3202aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3203aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3204aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3205aMatcha.03.07
ORhpadvancestack_10base-t_switching_hub_j3210aMatcha.03.07
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | advancestack_10base-t_switching_hub_j3200a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3200a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3201a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3201a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3202a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3202a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3203a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3203a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3204a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3204a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3205a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3205a:a.03.07:*:*:*:*:*:*:* |
| hp | advancestack_10base-t_switching_hub_j3210a | a.03.07 | cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3210a:a.03.07:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2002-0250
2003-04-02 05:00:00
cvelist
cvelist
CVE-2002-0250
2003-04-02 05:00:00
exploitdb
exploitdb
HP AdvanceStack Switch - Authentication Bypass
2002-02-08 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.015
Percentile
86.9%
Related for NVD:CVE-2002-0250