Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
| Software | From | Fixed in |
|---|---|---|
| hp / advancestack_10base-t_switching_hub_j3210a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3201a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3204a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3202a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3205a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3203a | a.03.07 | a.03.07.x |
| hp / advancestack_10base-t_switching_hub_j3200a | a.03.07 | a.03.07.x |