CVE-2002-0250

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-02517.5Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vCVE-2002-02527.5Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a longCVE-2002-02535.0PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an inclCVE-2002-02545.0ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and widCVE-2002-025510.0The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service CVE-2002-02565.0The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strCVE-2002-02577.5Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other useCVE-2002-02587.5Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attCVE-2002-02594.6InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache CVE-2002-02607.5Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, whicCVE-2002-02617.5Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files vCVE-2002-02625.0Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot
CVE-2002-0250: High severity, CVSS 7.5 | Vulnix