HP ProCurve Switch 4000m vulnerabilities

3 CVEs affecting HP ProCurve Switch 4000m, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1426, published 2003-04-11.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-1426, published 2003-04-11. High severity, CVSS 7.8. EPSS: 19.7% chance of exploitation in the next 30 days. HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.
• CVE-2002-1147, published 2002-10-11. High severity, CVSS 7.1. EPSS: 6.7% chance of exploitation in the next 30 days. The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device,…
• CVE-2002-0350, published 2002-06-25. High severity, CVSS 7.8. EPSS: 5.3% chance of exploitation in the next 30 days. HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service.