PT-2019-17641 · Hewlett Packard · Hp2910Al-48G

Published 2019-08-01 · Updated 2019-08-08 · CVE-2019-5401

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP2910al-48G version W.15.14.0016

Description A potential security issue has been identified, which exploits an XSS injection by setting the attack vector in one of the switch's persistent configuration fields, such as management URL, location, or contact. However, admin privileges are required to configure these fields, reducing the likelihood of exploitation.

Recommendations For HP2910al-48G version W.15.14.0016, update to W.15.14.0017 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-5401

Affected Products

Hp2910Al-48G

References · 3

• https://osv.dev/vulnerability/CVE-2019-5401 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03944en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5401 · Security Note