CVE-2002-0250
Published May 29, 2002
Last updated 8 years ago
Overview
- Description
- Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3200a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A5A77D8-5EA8-49D5-B74C-2EEF6095F1D1"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3201a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22822763-D7F1-4D98-B341-FC9C5E4CE97D"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3202a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E57EB636-B88D-4CF5-82F5-4FE6CED08D58"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3203a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9ECE2E78-98F5-4C94-9204-2D27AD551947"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3204a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68D94565-E124-4045-AFF4-B96CE0DDCF25"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3205a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8926906E-E7DE-4A6B-A059-FD4C1B5C01E7"
},
{
"criteria": "cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3210a:a.03.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DD122AA-5308-4B55-B59C-D26073B13923"
}
],
"operator": "OR"
}
]
}
]