PT-2019-17641 · Hewlett Packard · Hp2910Al-48G

Publicado 2019-08-01 · Atualizado 2019-08-08 · CVE-2019-5401

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP2910al-48G version W.15.14.0016

Description A potential security issue has been identified, which exploits an XSS injection by setting the attack vector in one of the switch's persistent configuration fields, such as management URL, location, or contact. However, admin privileges are required to configure these fields, reducing the likelihood of exploitation.

Recommendations For HP2910al-48G version W.15.14.0016, update to W.15.14.0017 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-5401

Produtos afetados

Hp2910Al-48G

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5401 · Aviso do Fabricante
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03944en_us · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5401 · Nota de Segurança