Authentication Bypass Vulnerability in HP AdvanceStack Hubs J3200A-J3210A Firmware A.03.07 and Earlier

Authentication Bypass Vulnerability in HP AdvanceStack Hubs J3200A-J3210A Firmware A.03.07 and Earlier

CVE-2002-0250 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Learn more about our User Device Pen Test.