What’s Vulnerable › Vulnerabilities

CVE-2002-0250

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-05-29 · updated 2026-06-16

Description

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Affected products

• HP Advancestack 10Base-T Switching Hub J3200A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3201A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3202A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3203A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3204A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3205A: a.03.07
• HP Advancestack 10Base-T Switching Hub J3210A: a.03.07

References

• http://marc.info/?l=bugtraq&m=101318469216213&w=2
• http://online.securityfocus.com/advisories/3870
• http://www.iss.net/security_center/static/8124.php
• http://www.securityfocus.com/bid/4062
• http://marc.info/?l=bugtraq&m=101318469216213&w=2
• http://online.securityfocus.com/advisories/3870
• http://www.iss.net/security_center/static/8124.php
• http://www.securityfocus.com/bid/4062

Get alerted when CVE-2002-0250 or the next vulnerability affects your stack