CVE-2019-5401 - CVE House
Back to Database
Status published Medium CVE-2019-5401

A potential security vulnerability has been identified in HP2910al-48G version...

Vulnerability Description

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields (management URL, location, contact). But admin privileges are required to configure these fields thereby reducing the likelihood of exploit. HPE Aruba has provided firmware updates to resolve the vulnerability in HP 2910-48G al Switch. Please update to W.15.14.0017.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5401

Credits & Attribution

No credits recorded in the NVD database.

References

More from HP

View All →
CVE-2020-6923
HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow
Medium 5.7
CVE-2019-6333
A potential security vulnerability has been identified with certain versions...
Medium 6.7
CVE-2019-6329
HP Support Assistant 8.7.50 and earlier allows a user to...
High 7.8
CVE-2019-6328
HP Support Assistant 8.7.50 and earlier allows a user to...
High 7.8
CVE-2019-6318
HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet...
Critical 9.8

Affected Vendor

Affected Software

HP 2910-48G al Switch
Vulnerable Versions:
W.15.14.0016

Timeline

Official Publish: August 1st, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.