What’s Vulnerable › Vulnerabilities

CVE-2017-5796

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-15 · updated 2026-06-17
• Weakness: CWE-352

Description

A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found.

Affected products

• HP J9623A Firmware: before ra.15.15.0014 — fixed in ra.15.15.0014
• HP J9624A Firmware: before ra.15.15.0014 — fixed in ra.15.15.0014
• HP J9625A Firmware: before ra.15.15.0014 — fixed in ra.15.15.0014
• HP J9626A Firmware: before ra.15.15.0014 — fixed in ra.15.15.0014
• HP J9627A Firmware: before ra.15.15.0014 — fixed in ra.15.15.0014

How to fix

Upgrade to a fixed version: HP J9623A Firmware ra.15.15.0014; HP J9624A Firmware ra.15.15.0014; HP J9625A Firmware ra.15.15.0014; HP J9626A Firmware ra.15.15.0014; HP J9627A Firmware ra.15.15.0014. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/96813
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us
• http://www.securityfocus.com/bid/96813
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us

Get alerted when CVE-2017-5796 or the next vulnerability affects your stack