CVE-2012-5216

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-28 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

HP Procurve Switch 1700-24: all versions
HP Procurve Switch 1700-8: all versions
HP Procurve Switch Software: through va.02.08; h-10.74, h-10.80, h.07.02, h.07.03, h.07.31, h.07.32 (+195)

References

http://jvn.jp/en/jp/JVN48108258/index.html
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981
http://jvn.jp/en/jp/JVN48108258/index.html
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981

Get alerted when CVE-2012-5216 or the next vulnerability affects your stack