CVE-2019-5401 - A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016

Back Back to CVE browser

MEDIUM

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016

Published Aug 1, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 0.54%

Description

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields (management URL, location, contact). But admin privileges are required to configure these fields thereby reducing the likelihood of exploit. HPE Aruba has provided firmware updates to resolve the vulnerability in HP 2910-48G al Switch. Please update to W.15.14.0017.

Affected products

Vendor HP Product HP 2910-48G al Switch Default
n/a
- Version
  W.15.14.0016
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HP 2910-48G al Switch

n/a

Version	Status	Constraints
W.15.14.0016	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03944en_us
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03944en_us		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hpe

Published Aug 1, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5401

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5401

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5401