CVE-2002-1147 — The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program

Back Back to CVE browser

HIGH

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program

Published Sep 1, 2004

7.1

HIGH

CVSS 2.0

EPSS 6.67%

Description

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.

Affected products

Remediation

No remediation recorded yet.

Metrics

6.67% 0.06668

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.06668

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	6.67% (0.06668)	93.69th	v5 (v2026.06.15)
Jun 15, 2026	6.67% (0.06668)	93.01th	v5 (v2026.06.15)
Mar 17, 2025	5.93% (0.05933)	89.93th	v4 (v2025.03.14)
Dec 12, 2024	6.93% (0.06929)	94.19th	v3 (v2023.03.01)
Mar 9, 2024	6.93% (0.06929)	93.75th	v3 (v2023.03.01)
Aug 9, 2023	7.42% (0.07424)	93.22th	v3 (v2023.03.01)
Mar 7, 2023	7.96% (0.07963)	93.21th	v3 (v2023.03.01)
Mar 6, 2023	4.48% (0.04482)	88.77th	v2 (v2022.01.01)
Apr 1, 2022	4.48% (0.04482)	87.66th	v2 (v2022.01.01)
Feb 4, 2022	4.48% (0.04482)	71.45th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

http://marc.info/?l=bugtraq&m=103287951910420&w=2
mailing-listx_refsource_BUGTRAQ
http://online.securityfocus.com/advisories/4501
vendor-advisoryx_refsource_HPVendor Advisory
http://www.iss.net/security_center/static/10172.php
vdb-entryx_refsource_XFVendor Advisory
http://www.securityfocus.com/bid/5784
vdb-entryx_refsource_BID
http://www.tech-serve.com/research/advisories/2002/a092302-1.txt
x_refsource_MISC

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=103287951910420&w=2		mailing-listx_refsource_BUGTRAQ
http://online.securityfocus.com/advisories/4501		vendor-advisoryx_refsource_HPVendor Advisory
http://www.iss.net/security_center/static/10172.php		vdb-entryx_refsource_XFVendor Advisory
http://www.securityfocus.com/bid/5784		vdb-entryx_refsource_BID
http://www.tech-serve.com/research/advisories/2002/a092302-1.txt		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 1, 2004

Updated Aug 8, 2024

Reserved Sep 24, 2002

Link CVE-2002-1147

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2002-1147

Red Hat

Severity n/a

Public date n/a

Links CVE-2002-1147