Vulnerability CVE-2012-0133
Published: 2012-04-12

Description:
HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card.

Type:

CWE-DesignError

CVSS2 => (AV:L/AC:H/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.7/10
6.4/10
1.9/10
Exploit range
Attack complexity
Authentication
Local
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
HP -> Procurve switch 5400zl 
HP -> Procurve switch 5412zl-92gg-poe%2B%2F2xg sfp%2B v2 
HP -> Procurve switch 5406zl-44g-poe%2B%2F2xg sfp%2B v2 
HP -> Procurve switch 5406zl-44g-poe%2B%2F4g sfp%2B v2 
HP -> Procurve switch 5412zl-92g-poe%2B%2F4g sfp%2B v2 
HP -> Procurve switch e5406zl 
HP -> Procurve switch e5412zl 
HP -> Procurve switch chassis e5406zl 
HP -> Procurve switch chassis e5412zl 
HP -> Procurve switch 5406-48gzl 
HP -> Procurve switch 5412-200096gzl 
HP -> Procurve switch 5406-44g-poe%2B-4sfpzl 
HP -> Procurve switch 5412-92g-poe%2B-4sfpzl 
HP -> Procurve switch 5400zl management module 

 References:
http://www.securityfocus.com/archive/1/522288
http://www.securityfocus.com/archive/1/522288
Copyright 2024, cxsecurity.com

 

Back to Top