CVE-2002-1147

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-10-11 · updated 2026-06-16

Description

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.

Affected products

HP Procurve Switch 4000M: through c.09.15

References

http://marc.info/?l=bugtraq&m=103287951910420&w=2
http://online.securityfocus.com/advisories/4501
http://www.iss.net/security_center/static/10172.php
http://www.securityfocus.com/bid/5784
http://www.tech-serve.com/research/advisories/2002/a092302-1.txt
http://marc.info/?l=bugtraq&m=103287951910420&w=2
http://online.securityfocus.com/advisories/4501
http://www.iss.net/security_center/static/10172.php
http://www.securityfocus.com/bid/5784
http://www.tech-serve.com/research/advisories/2002/a092302-1.txt

Get alerted when CVE-2002-1147 or the next vulnerability affects your stack