Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and…
Priority LOW 29Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors.
Why it matters now
EPSS 0.00981 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:procurve_switch_software:*:*:*:*:*:*:*:* | up to pb.03.02 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.01:*:*:*:*:*:*:* | pb.02.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.02:*:*:*:*:*:*:* | pb.02.02 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.03:*:*:*:*:*:*:* | pb.02.03 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.04:*:*:*:*:*:*:* | pb.02.04 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.05:*:*:*:*:*:*:* | pb.02.05 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.06:*:*:*:*:*:*:* | pb.02.06 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.07:*:*:*:*:*:*:* | pb.02.07 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.08:*:*:*:*:*:*:* | pb.02.08 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.02.09:*:*:*:*:*:*:* | pb.02.09 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:procurve_switch_software:*:*:*:*:*:*:*:* Versions up to pb.03.02 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.01:*:*:*:*:*:*:* Versions pb.02.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.02:*:*:*:*:*:*:* Versions pb.02.02 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.03:*:*:*:*:*:*:* Versions pb.02.03 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.04:*:*:*:*:*:*:* Versions pb.02.04 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.05:*:*:*:*:*:*:* Versions pb.02.05 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.06:*:*:*:*:*:*:* Versions pb.02.06 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.07:*:*:*:*:*:*:* Versions pb.02.07 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.08:*:*:*:*:*:*:* Versions pb.02.08 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.02.09:*:*:*:*:*:*:* Versions pb.02.09 Vulnerable ·Hewlett Packard Enterprise
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:procurve_switch_software:pb.03.00:*:*:*:*:*:*:* | pb.03.00 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pb.03.01:*:*:*:*:*:*:* | pb.03.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:procurve_switch_1800-24g:*:*:*:*:*:*:*:* | all versions | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:*:*:*:*:*:*:*:* | up to pa.03.02 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.01:*:*:*:*:*:*:* | pa.02.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.02:*:*:*:*:*:*:* | pa.02.02 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.03:*:*:*:*:*:*:* | pa.02.03 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.04:*:*:*:*:*:*:* | pa.02.04 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.05:*:*:*:*:*:*:* | pa.02.05 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.06:*:*:*:*:*:*:* | pa.02.06 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.07:*:*:*:*:*:*:* | pa.02.07 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.08:*:*:*:*:*:*:* | pa.02.08 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.02.09:*:*:*:*:*:*:* | pa.02.09 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.03.00:*:*:*:*:*:*:* | pa.03.00 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:procurve_switch_software:pa.03.01:*:*:*:*:*:*:* | pa.03.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:procurve_switch_1800-8g:*:*:*:*:*:*:*:* | all versions | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:procurve_switch_software:pb.03.00:*:*:*:*:*:*:* Versions pb.03.00 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pb.03.01:*:*:*:*:*:*:* Versions pb.03.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:procurve_switch_1800-24g:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:*:*:*:*:*:*:*:* Versions up to pa.03.02 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.01:*:*:*:*:*:*:* Versions pa.02.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.02:*:*:*:*:*:*:* Versions pa.02.02 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.03:*:*:*:*:*:*:* Versions pa.02.03 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.04:*:*:*:*:*:*:* Versions pa.02.04 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.05:*:*:*:*:*:*:* Versions pa.02.05 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.06:*:*:*:*:*:*:* Versions pa.02.06 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.07:*:*:*:*:*:*:* Versions pa.02.07 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.08:*:*:*:*:*:*:* Versions pa.02.08 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.02.09:*:*:*:*:*:*:* Versions pa.02.09 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.03.00:*:*:*:*:*:*:* Versions pa.03.00 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:procurve_switch_software:pa.03.01:*:*:*:*:*:*:* Versions pa.03.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:procurve_switch_1800-8g:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-2705
- 2026-10-03 Alias added: GHSA-hwjp-953c-q8wq
References
Advisory 1
Sources
- CVE-2010-2705 · CVE Program
- CVE-2010-2705 · NVD
- FIRST EPSS
- GHSA-hwjp-953c-q8wq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences