Read the docs
TI-2012-00132 Aliases CVE-2012-0133GHSA-r933-xg34-3423

HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card…

Priority LOW 20Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card.

Why it matters now

EPSS 0.01166 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:h:hp:procurve_switch_5400zl:*:*:*:*:*:*:*:*all versionsVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id116as0hr:*:*:*:*:*:*:*id116as0hrVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id116as04p:*:*:*:*:*:*:*id116as04pVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id117as00h:*:*:*:*:*:*:*id117as00hVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id126as0fb:*:*:*:*:*:*:*id126as0fbVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5406-44g-poe\+-4sfpzl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5406-48gzl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5406zl-44g-poe\+\/2xg_sfp\+_v2:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5406zl-44g-poe\+\/4g_sfp\+_v2:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5412-92g-poe\+-4sfpzl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5400zl:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id116as0hr:*:*:*:*:*:*:* Versions id116as0hr Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id116as04p:*:*:*:*:*:*:* Versions id116as04p Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id117as00h:*:*:*:*:*:*:* Versions id117as00h Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5400zl_management_module:id126as0fb:*:*:*:*:*:*:* Versions id126as0fb Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5406-44g-poe\+-4sfpzl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5406-48gzl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5406zl-44g-poe\+\/2xg_sfp\+_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5406zl-44g-poe\+\/4g_sfp\+_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5412-92g-poe\+-4sfpzl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hp:procurve_switch_5412-96gzl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5412zl-92g-poe\+\/4g_sfp\+_v2:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_5412zl-92gg-poe\+\/2xg_sfp\+_v2:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_chassis_e5406zl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_chassis_e5412zl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_e5406zl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:procurve_switch_e5412zl:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5412-96gzl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5412zl-92g-poe\+\/4g_sfp\+_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_5412zl-92gg-poe\+\/2xg_sfp\+_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_chassis_e5406zl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_chassis_e5412zl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_e5406zl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:procurve_switch_e5412zl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0133
  2. 2026-10-03 Alias added: GHSA-r933-xg34-3423

References

—

  • TI-2006-03891 Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences