Description
The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Brook Powers · textdoshardware
https://www.exploit-db.com/exploits/21828
References (5)
Core 5
Core References
Various Sources x_refsource_misc
http://www.tech-serve.com/research/advisories/2002/a092302-1.txt
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103287951910420&w=2
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10172.php
Vendor Advisory vendor-advisory
x_refsource_hp
http://online.securityfocus.com/advisories/4501
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5784
Scores
EPSS
0.0593
EPSS Percentile
90.7%
Details
Status
published
Products (1)
hp/procurve_switch_4000m
< c.09.15
Published
Oct 11, 2002
Tracked Since
Feb 18, 2026