HP ProCurve Switch Software vulnerabilities

5 CVEs affecting HP ProCurve Switch Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5216, published 2013-03-28.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-5216, published 2013-03-28. Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote…
• CVE-2010-2707, published 2010-08-09. High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability on the HP ProCurve 2626 and 2650 switches before H.10.80 allows remote attackers to obtain sensitive information, modify data, and cause a denial of service via unknown…
• CVE-2010-2705, published 2010-08-09. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows…
• CVE-2010-2708, published 2010-08-09. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability on the HP ProCurve 2610 switch before R.11.22, when DHCP is enabled, allows remote attackers to cause a denial of service via unknown vectors.
• CVE-2010-2706, published 2010-08-09. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the In-band Agent on the HP ProCurve 2610 switch before R.11.30 allows remote attackers to cause a denial of service via unknown vectors.