CVEvulnerability
CVE-2012-5216
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• hp procurve switch software (<= va.02.08)
• hp procurve switch software h
• hp procurve switch software h.07.02
• hp procurve switch software h.07.03
• hp procurve switch software h.07.31
• hp procurve switch software h.07.32
• hp procurve switch software h.07.41
• hp procurve switch software h.07.45
• hp procurve switch software h.07.46
• hp procurve switch software h.07.50
• hp procurve switch software h.07.53
• hp procurve switch software h.07.54
• hp procurve switch software h.07.55
• hp procurve switch software h.07.56
• hp procurve switch software h.08.53
• hp procurve switch software h.08.55
• hp procurve switch software h.08.56
• hp procurve switch software h.08.57
• hp procurve switch software h.08.58
• hp procurve switch software h.08.59
• hp procurve switch software h.08.60
• hp procurve switch software h.08.61
• hp procurve switch software h.08.62
• hp procurve switch software h.08.64
• hp procurve switch software h.08.65
• hp procurve switch software h.08.67
• hp procurve switch software h.08.69
• hp procurve switch software h.08.70
• hp procurve switch software h.08.71
• hp procurve switch software h.08.72
• hp procurve switch software h.08.73
• hp procurve switch software h.08.74
• hp procurve switch software h.08.75
• hp procurve switch software h.08.76
• hp procurve switch software h.08.77
• hp procurve switch software h.08.78
• hp procurve switch software h.08.79
• hp procurve switch software h.08.80
• hp procurve switch software h.08.81
• hp procurve switch software h.08.82
• hp procurve switch software h.08.83
• hp procurve switch software h.08.84
• hp procurve switch software h.08.85
• hp procurve switch software h.08.86
• hp procurve switch software h.08.87
• hp procurve switch software h.08.88
• hp procurve switch software h.08.89
• hp procurve switch software h.08.90
• hp procurve switch software h.08.91
• hp procurve switch software h.08.92
• hp procurve switch software h.08.93
• hp procurve switch software h.08.94
• hp procurve switch software h.08.95
• hp procurve switch software h.08.96
• hp procurve switch software h.08.97
• hp procurve switch software h.08.98
• hp procurve switch software h.08.99
• hp procurve switch software h.08.100
• hp procurve switch software h.08.101
• hp procurve switch software h.08.102
… and 143 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://jvn.jp/en/jp/JVN48108258/index.html jvn.jp
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981 Vendor Advisory
- http://jvn.jp/en/jp/JVN48108258/index.html jvn.jp
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981 Vendor Advisory