製品・ソフトウェアに関する情報

JVN脆弱性詳細

HP ProCurve 1700 シリーズのスイッチにおけるクロスサイトリクエストフォージェリの脆弱性

タイトル	HP ProCurve 1700 シリーズのスイッチにおけるクロスサイトリクエストフォージェリの脆弱性
概要	HP が提供する ProCurve 1700 シリーズのスイッチには、クロスサイトリクエストフォージェリの脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 株式会社フォティーンフォティ技術研究所ダレンウィリス氏
想定される影響	ユーザが、当該製品にログインした状態で細工されたページにアクセスした場合、製品の設定が変更される可能性があります。
対策	[アップデートする] 開発者が提供する情報をもとに、最新版へアップデートしてください。
公表日	2013年6月3日0:00
登録日	2013年6月3日12:01
最終更新日	2013年6月3日12:01

CVSS2.0 : 注意
スコア	2.6
ベクター	AV:N/AC:H/Au:N/C:N/I:P/A:N

影響を受けるシステム

ヒューレット・パッカード

ProCurve Switch 1700-24 Switch (J9080A) VB.02.08 より前のバージョン

ProCurve Switch 1700-8 Switch (J9079A) VA.02.08 より前のバージョン

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-5216	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5216
National Vulnerability Database (NVD)
2	CVE-2012-5216	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5216

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-352	https://jvndb.jvn.jp/ja/cwe/CWE-352.html

ベンダー情報

No	名前	URL
Hewlett Packard
1	HP ProCurve 1700-8(J9079A) and 1700-24(J9080A) Switches, Cross Site Request Forgery (CSRF)	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981

その他

No	名前	URL
JVN
1	JVN#48108258	http://jvn.jp/jp/JVN48108258/index.html

変更履歴

No	変更内容	変更日
0	[2013年06月03日] 掲載	2018年2月17日10:37

NVD脆弱性情報

CVE-2012-5216

概要	Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
公表日	2013年3月29日8:55
登録日	2021年1月28日15:05
最終更新日	2024年11月21日10:44

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:o:hp:procurve_switch_software::::::::		va.02.08
cpe:2.3:o:hp:procurve_switch_software:h:10.74::::::
cpe:2.3:o:hp:procurve_switch_software:h:10.80::::::
cpe:2.3:o:hp:procurve_switch_software:h.07.02:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.03:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.31:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.32:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.41:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.45:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.46:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.50:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.53:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.54:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.55:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.07.56:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.53:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.55:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.56:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.57:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.58:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.59:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.60:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.61:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.62:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.64:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.65:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.67:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.69:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.70:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.71:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.72:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.73:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.74:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.75:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.76:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.77:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.78:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.79:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.80:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.81:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.82:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.83:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.84:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.85:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.86:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.87:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.88:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.89:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.90:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.91:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.92:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.93:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.94:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.95:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.96:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.97:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.98:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.99:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.100:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.101:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.102:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.103:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.104:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.105:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.106:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.107:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.108:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.08.109:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.20:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.21:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.22:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.23:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.24:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.25:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.26:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.27:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.28:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.29:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.30:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.31:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.32:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.33:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.35:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.36:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.37:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.38:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.39:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.40:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.41:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.42:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.43:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.44:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.45:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.46:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.47:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.48:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.49:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.50:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.51:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.52:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.53:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.54:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.55:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.56:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.57:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.58:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.59:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.60:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.61:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.62:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.63:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.64:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.65:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.66:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.67:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.68:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.69:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.70:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.71:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.72:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.73:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.74:::::::*
cpe:2.3:o:hp:procurve_switch_software:h.10.80:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.01:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.02:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.03:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.04:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.05:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.06:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.07:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.08:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.02.09:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.03.00:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.03.01:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.03.02:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.03.03:::::::*
cpe:2.3:o:hp:procurve_switch_software:pa.03.04:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.01:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.02:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.03:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.04:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.05:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.06:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.07:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.08:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.02.09:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.03.00:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.03.01:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.03.02:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.03.03:::::::*
cpe:2.3:o:hp:procurve_switch_software:pb.03.04:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.04:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.05:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.06:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.07:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.08:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.09:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.10:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.11:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.12:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.13:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.14:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.15:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.16:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.17:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.18:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.19:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.20:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.21:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.22:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.23:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.24:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.25:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.26:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.27:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.28:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.29:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.30:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.31:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.32:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.33:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.34:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.35:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.36:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.37:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.38:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.39:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.40:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.41:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.42:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.43:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.44:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.45:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.46:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.47:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.48:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.49:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.50:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.51:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.52:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.53:::::::*
cpe:2.3:o:hp:procurve_switch_software:r.11.54:::::::*
cpe:2.3:h:hp:procurve_switch_1700-24:-:::::::*
cpe:2.3:h:hp:procurve_switch_1700-8:-:::::::*

No	URL	タグ
1	http://jvn.jp/en/jp/JVN48108258/index.html
2	http://jvn.jp/en/jp/JVN48108258/index.html
3	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981	Vendor Advisory
4	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981	Vendor Advisory
5	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981	Vendor Advisory
6	https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981	Vendor Advisory

No	CWE	名前	URL
1	CWE-352	クロスサイト・リクエスト・フォージェリ（CSRF）	https://cwe.mitre.org/data/definitions/352.html
2	CWE-352	同一生成元ポリシー違反	https://cwe.mitre.org/data/definitions/346.html