CVE-2012-5216: CSRF
Published Mar 28, 2013
·Updated
Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
204 affected components
HP Procurve Switch Software<=va.02.08
HP Procurve Switch Software=h-10.74
HP Procurve Switch Software=h-10.80
HP Procurve Switch Software=h.07.02
HP Procurve Switch Software=h.07.03
HP Procurve Switch Software=h.07.31
HP Procurve Switch Software=h.07.32
HP Procurve Switch Software=h.07.41
HP Procurve Switch Software=h.07.45
HP Procurve Switch Software=h.07.46
HP Procurve Switch Software=h.07.50
HP Procurve Switch Software=h.07.53
HP Procurve Switch Software=h.07.54
HP Procurve Switch Software=h.07.55
HP Procurve Switch Software=h.07.56
HP Procurve Switch Software=h.08.53
HP Procurve Switch Software=h.08.55
HP Procurve Switch Software=h.08.56
HP Procurve Switch Software=h.08.57
HP Procurve Switch Software=h.08.58
HP Procurve Switch Software=h.08.59
HP Procurve Switch Software=h.08.60
HP Procurve Switch Software=h.08.61
HP Procurve Switch Software=h.08.62
HP Procurve Switch Software=h.08.64
HP Procurve Switch Software=h.08.65
HP Procurve Switch Software=h.08.67
HP Procurve Switch Software=h.08.69
HP Procurve Switch Software=h.08.70
HP Procurve Switch Software=h.08.71
HP Procurve Switch Software=h.08.72
HP Procurve Switch Software=h.08.73
HP Procurve Switch Software=h.08.74
HP Procurve Switch Software=h.08.75
HP Procurve Switch Software=h.08.76
HP Procurve Switch Software=h.08.77
HP Procurve Switch Software=h.08.78
HP Procurve Switch Software=h.08.79
HP Procurve Switch Software=h.08.80
HP Procurve Switch Software=h.08.81
HP Procurve Switch Software=h.08.82
HP Procurve Switch Software=h.08.83
HP Procurve Switch Software=h.08.84
HP Procurve Switch Software=h.08.85
HP Procurve Switch Software=h.08.86
HP Procurve Switch Software=h.08.87
HP Procurve Switch Software=h.08.88
HP Procurve Switch Software=h.08.89
HP Procurve Switch Software=h.08.90
HP Procurve Switch Software=h.08.91
HP Procurve Switch Software=h.08.92
HP Procurve Switch Software=h.08.93
HP Procurve Switch Software=h.08.94
HP Procurve Switch Software=h.08.95
HP Procurve Switch Software=h.08.96
HP Procurve Switch Software=h.08.97
HP Procurve Switch Software=h.08.98
HP Procurve Switch Software=h.08.99
HP Procurve Switch Software=h.08.100
HP Procurve Switch Software=h.08.101
HP Procurve Switch Software=h.08.102
HP Procurve Switch Software=h.08.103
HP Procurve Switch Software=h.08.104
HP Procurve Switch Software=h.08.105
HP Procurve Switch Software=h.08.106
HP Procurve Switch Software=h.08.107
HP Procurve Switch Software=h.08.108
HP Procurve Switch Software=h.08.109
HP Procurve Switch Software=h.10.20
HP Procurve Switch Software=h.10.21
HP Procurve Switch Software=h.10.22
HP Procurve Switch Software=h.10.23
HP Procurve Switch Software=h.10.24
HP Procurve Switch Software=h.10.25
HP Procurve Switch Software=h.10.26
HP Procurve Switch Software=h.10.27
HP Procurve Switch Software=h.10.28
HP Procurve Switch Software=h.10.29
HP Procurve Switch Software=h.10.30
HP Procurve Switch Software=h.10.31
HP Procurve Switch Software=h.10.32
HP Procurve Switch Software=h.10.33
HP Procurve Switch Software=h.10.35
HP Procurve Switch Software=h.10.36
HP Procurve Switch Software=h.10.37
HP Procurve Switch Software=h.10.38
HP Procurve Switch Software=h.10.39
HP Procurve Switch Software=h.10.40
HP Procurve Switch Software=h.10.41
HP Procurve Switch Software=h.10.42
HP Procurve Switch Software=h.10.43
HP Procurve Switch Software=h.10.44
HP Procurve Switch Software=h.10.45
HP Procurve Switch Software=h.10.46
HP Procurve Switch Software=h.10.47
HP Procurve Switch Software=h.10.48
HP Procurve Switch Software=h.10.49
HP Procurve Switch Software=h.10.50
HP Procurve Switch Software=h.10.51
HP Procurve Switch Software=h.10.52
HP Procurve Switch Software=h.10.53
HP Procurve Switch Software=h.10.54
HP Procurve Switch Software=h.10.55
HP Procurve Switch Software=h.10.56
HP Procurve Switch Software=h.10.57
HP Procurve Switch Software=h.10.58
HP Procurve Switch Software=h.10.59
HP Procurve Switch Software=h.10.60
HP Procurve Switch Software=h.10.61
HP Procurve Switch Software=h.10.62
HP Procurve Switch Software=h.10.63
HP Procurve Switch Software=h.10.64
HP Procurve Switch Software=h.10.65
HP Procurve Switch Software=h.10.66
HP Procurve Switch Software=h.10.67
HP Procurve Switch Software=h.10.68
HP Procurve Switch Software=h.10.69
HP Procurve Switch Software=h.10.70
HP Procurve Switch Software=h.10.71
HP Procurve Switch Software=h.10.72
HP Procurve Switch Software=h.10.73
HP Procurve Switch Software=h.10.74
HP Procurve Switch Software=h.10.80
HP Procurve Switch Software=pa.02.01
HP Procurve Switch Software=pa.02.02
HP Procurve Switch Software=pa.02.03
HP Procurve Switch Software=pa.02.04
HP Procurve Switch Software=pa.02.05
HP Procurve Switch Software=pa.02.06
HP Procurve Switch Software=pa.02.07
HP Procurve Switch Software=pa.02.08
HP Procurve Switch Software=pa.02.09
HP Procurve Switch Software=pa.03.00
HP Procurve Switch Software=pa.03.01
HP Procurve Switch Software=pa.03.02
HP Procurve Switch Software=pa.03.03
HP Procurve Switch Software=pa.03.04
HP Procurve Switch Software=pb.02.01
HP Procurve Switch Software=pb.02.02
HP Procurve Switch Software=pb.02.03
HP Procurve Switch Software=pb.02.04
HP Procurve Switch Software=pb.02.05
HP Procurve Switch Software=pb.02.06
HP Procurve Switch Software=pb.02.07
HP Procurve Switch Software=pb.02.08
HP Procurve Switch Software=pb.02.09
HP Procurve Switch Software=pb.03.00
HP Procurve Switch Software=pb.03.01
HP Procurve Switch Software=pb.03.02
HP Procurve Switch Software=pb.03.03
HP Procurve Switch Software=pb.03.04
HP Procurve Switch Software=r.11.04
HP Procurve Switch Software=r.11.05
HP Procurve Switch Software=r.11.06
HP Procurve Switch Software=r.11.07
HP Procurve Switch Software=r.11.08
HP Procurve Switch Software=r.11.09
HP Procurve Switch Software=r.11.10
HP Procurve Switch Software=r.11.11
HP Procurve Switch Software=r.11.12
HP Procurve Switch Software=r.11.13
HP Procurve Switch Software=r.11.14
HP Procurve Switch Software=r.11.15
HP Procurve Switch Software=r.11.16
HP Procurve Switch Software=r.11.17
HP Procurve Switch Software=r.11.18
HP Procurve Switch Software=r.11.19
HP Procurve Switch Software=r.11.20
HP Procurve Switch Software=r.11.21
HP Procurve Switch Software=r.11.22
HP Procurve Switch Software=r.11.23
HP Procurve Switch Software=r.11.24
HP Procurve Switch Software=r.11.25
HP Procurve Switch Software=r.11.26
HP Procurve Switch Software=r.11.27
HP Procurve Switch Software=r.11.28
HP Procurve Switch Software=r.11.29
HP Procurve Switch Software=r.11.30
HP Procurve Switch Software=r.11.31
HP Procurve Switch Software=r.11.32
HP Procurve Switch Software=r.11.33
HP Procurve Switch Software=r.11.34
HP Procurve Switch Software=r.11.35
HP Procurve Switch Software=r.11.36
HP Procurve Switch Software=r.11.37
HP Procurve Switch Software=r.11.38
HP Procurve Switch Software=r.11.39
HP Procurve Switch Software=r.11.40
HP Procurve Switch Software=r.11.41
HP Procurve Switch Software=r.11.42
HP Procurve Switch Software=r.11.43
HP Procurve Switch Software=r.11.44
HP Procurve Switch Software=r.11.45
HP Procurve Switch Software=r.11.46
HP Procurve Switch Software=r.11.47
HP Procurve Switch Software=r.11.48
HP Procurve Switch Software=r.11.49
HP Procurve Switch Software=r.11.50
HP Procurve Switch Software=r.11.51
HP Procurve Switch Software=r.11.52
HP Procurve Switch Software=r.11.53
HP Procurve Switch Software=r.11.54
HP Procurve Switch 1700-24
HP Procurve Switch 1700-8
Event History
Mar 28, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5216?
CVE-2012-5216 is classified as a medium severity vulnerability due to its potential for CSRF attacks.
2
How do I fix CVE-2012-5216?
To fix CVE-2012-5216, update the HP ProCurve switch software to version VA.02.09 or later for the 1700-8 model and VB.02.09 or later for the 1700-24 model.
3
What kind of devices are affected by CVE-2012-5216?
CVE-2012-5216 affects HP ProCurve 1700-8 and 1700-24 switches running older versions of their software.
4
Can CVE-2012-5216 be exploited remotely?
Yes, CVE-2012-5216 can be exploited remotely by attackers to hijack the authentication of users.
5
What is a cross-site request forgery (CSRF) vulnerability like CVE-2012-5216?
A CSRF vulnerability like CVE-2012-5216 allows attackers to perform actions on behalf of authenticated users without their consent.