HP Procurve 4000M Switch - Device Reset Denial of Service

Author: Brook Powers
type: dos
platform: hardware
port: 
date_added: 2002-09-24 
date_updated: 2012-10-09 
verified: 1 
codes: CVE-2002-1147;OSVDB-10861 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/5784/info

When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via the web.

It has been reported that HP Procurve Switches are vulnerable to a denial of service attack, when used in a "stack" configuration. It is possible for an attacker to reset member switches by issuing a device reset command to a vulnerable device. Vulnerable devices do not require authentication before accepting this command.

It should be noted that the web interface is not enabled by default.

http://<IP ADDRESS>/sw2/cgi/device_reset?