CVE-2002-0250

CVSS 7.5 - HIGH
Description

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Affected Products
7
Vendor Product Version
hp advancestack_10base-t_switching_hub_j3200a a.03.07
hp advancestack_10base-t_switching_hub_j3201a a.03.07
hp advancestack_10base-t_switching_hub_j3202a a.03.07
hp advancestack_10base-t_switching_hub_j3203a a.03.07
hp advancestack_10base-t_switching_hub_j3204a a.03.07
hp advancestack_10base-t_switching_hub_j3205a a.03.07
hp advancestack_10base-t_switching_hub_j3210a a.03.07
References
http://marc.info/?l=bugtraq&m=101318469216213&w=2
http://online.securityfocus.com/advisories/3870
http://www.iss.net/security_center/static/8124.php
http://www.securityfocus.com/bid/4062
http://marc.info/?l=bugtraq&m=101318469216213&w=2
http://online.securityfocus.com/advisories/3870
http://www.iss.net/security_center/static/8124.php
http://www.securityfocus.com/bid/4062
Weakness Types
NVD-CWE-Other
CVE Information
CVE ID:
CVE-2002-0250
Published:
2002-05-29
Modified:
2026-04-16
CVSS Score:
7.5
Severity:
HIGH
Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Vendors
hp
Quick Actions
View on NVD Find Similar CVEs
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL