vulnwire
7.1high

CVE-2002-11471 exploit

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration en…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.7%
percentile 94%
Public exploits
1
Exploit-DB

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.

Exploit prediction (EPSS)

6.67% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-21828 HP Procurve 4000M Switch - Device Reset Denial of Service · dos · 2002-09-24

CVSS scores

Assigned byVersionScoreVector
NVD2.07.1AV:N/AC:M/Au:N/C:N/I:N/A:C

References

  • tech-serve.com /research/advisories/2002/a092302-1.txt · x_refsource_MISC, x_transferred
  • marc.info /?l=bugtraq&m=103287951910420&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/10172.php · vdb-entry, x_refsource_XF, x_transferred
  • online.securityfocus.com /advisories/4501 · vendor-advisory, x_refsource_HP, x_transferred
  • securityfocus.com /bid/5784 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.