HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow…
Priority LOW 33CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."
Why it matters now
EPSS 0.02048 81st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 87
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fd:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taa:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fg:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taa:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jg798a_hp_flexfabric_12508e_fabric:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluation:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jh192a_hp_10500_48-port_gig-t_\(rj45\)_se:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:jh196a_hp_10500_2-port_100gbe_cfp_ec:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc072b_hp_12500_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc085a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fd:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taa:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fg:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taa:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jg798a_hp_flexfabric_12508e_fabric:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluation:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jh192a_hp_10500_48-port_gig-t_\(rj45\)_se:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:jh196a_hp_10500_2-port_100gbe_cfp_ec:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc072b_hp_12500_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc085a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
Show 77 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hp:jc086a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc124a_hp_a9508_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc124b_hp_9505_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc125a_hp_a9512_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc125b_hp_9512_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc474a_hp_a9508-v_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc474b_hp_9508-v_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc611a_hp_10508-v_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc612a_hp_10508_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc613a_hp_10504_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc652a_hp_12508_dc_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc653a_hp_12518_dc_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc654a_hp_12504_ac_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc655a_hp_12504_dc_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc748a_hp_10512_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jc808a_hp_12500_taa_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf430a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf430b_hp_12518_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf430c_hp_12518_ac_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf431a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf431b_hp_12508_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jf431c_hp_12508_ac_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg296a_hp_5920af-24xg_switch:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg353a_hp_hsr6602-g_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg354a_hp_hsr6602-xg_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg361a_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg361b_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg362a_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg362b_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg363a_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg363b_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg364a_hp_hsr6800_rse-x2_router_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg402a_hp_msr4080_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg403a_hp_msr4060_router_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg404a_hp_msr3064_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg405a_hp_msr3044_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg406a_hp_msr3024_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg407a_hp_msr3024_dc_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg408a_hp_msr3024_poe_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg409a_hp_msr3012_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg410a_hp_msr3012_dc_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg411a_hp_msr2003_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg412a_hp_msr4000_mpu-100_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg555a_hp_5920af-24xg_taa_switch:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg734a_hp_msr2004-24_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg735a\)_hp_msr2004-48_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg776a_hp_hsr6602-g_taa-compliant_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg777a_hp_hsr6602-xg_taa-compliant_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg782a_hp_ff_12508e_ac_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg783a_hp_ff_12508e_dc_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg784a_hp_ff_12518e_ac_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg785a_hp_ff_12518e_dc_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg802a_hp_ff_12500e_mpu:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg811aae_hp_vsr1001_comware_7_virtual_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg812aae_hp_vsr1004_comware_7_virtual_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg813aae_hp_vsr1008_comware_7_virtual_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg820a_hp_10504_taa_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg821a_hp_10508_taa_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg822a_hp_10508-v_taa_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg823a_hp_10512_taa_switch_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg861a_hp_msr3024_taa-compliant_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg866a_hp_msr2003_taa-compliant_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jg875a_hp_msr1002-4_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jh060a_hp_msr1003-8s_ac_router:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jh075a\)_hp_hsr6800_rse-x3_router_main_processing_unit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jh179a_hp_flexfabric_5930_4-slot_switch:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switch:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:jg496a_hp_10500_type_a_mpu_with_comware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:jg497a_hp_12500_mpu_w\/comware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:jh198a_hp_10500_type_d_main_processing_unit_with_comware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:h:hp:jc086a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc124a_hp_a9508_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc124b_hp_9505_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc125a_hp_a9512_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc125b_hp_9512_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc474a_hp_a9508-v_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc474b_hp_9508-v_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc611a_hp_10508-v_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc612a_hp_10508_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc613a_hp_10504_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc652a_hp_12508_dc_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc653a_hp_12518_dc_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc654a_hp_12504_ac_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc655a_hp_12504_dc_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc748a_hp_10512_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jc808a_hp_12500_taa_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf430a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf430b_hp_12518_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf430c_hp_12518_ac_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf431a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf431b_hp_12508_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jf431c_hp_12508_ac_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg296a_hp_5920af-24xg_switch:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg353a_hp_hsr6602-g_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg354a_hp_hsr6602-xg_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg361a_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg361b_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg362a_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg362b_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg363a_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg363b_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg364a_hp_hsr6800_rse-x2_router_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg402a_hp_msr4080_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg403a_hp_msr4060_router_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg404a_hp_msr3064_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg405a_hp_msr3044_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg406a_hp_msr3024_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg407a_hp_msr3024_dc_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg408a_hp_msr3024_poe_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg409a_hp_msr3012_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg410a_hp_msr3012_dc_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg411a_hp_msr2003_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg412a_hp_msr4000_mpu-100_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg555a_hp_5920af-24xg_taa_switch:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg734a_hp_msr2004-24_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg735a\)_hp_msr2004-48_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg776a_hp_hsr6602-g_taa-compliant_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg777a_hp_hsr6602-xg_taa-compliant_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg782a_hp_ff_12508e_ac_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg783a_hp_ff_12508e_dc_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg784a_hp_ff_12518e_ac_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg785a_hp_ff_12518e_dc_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg802a_hp_ff_12500e_mpu:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg811aae_hp_vsr1001_comware_7_virtual_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg812aae_hp_vsr1004_comware_7_virtual_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg813aae_hp_vsr1008_comware_7_virtual_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg820a_hp_10504_taa_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg821a_hp_10508_taa_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg822a_hp_10508-v_taa_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg823a_hp_10512_taa_switch_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg861a_hp_msr3024_taa-compliant_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg866a_hp_msr2003_taa-compliant_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jg875a_hp_msr1002-4_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jh060a_hp_msr1003-8s_ac_router:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jh075a\)_hp_hsr6800_rse-x3_router_main_processing_unit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jh179a_hp_flexfabric_5930_4-slot_switch:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switch:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:jg496a_hp_10500_type_a_mpu_with_comware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:jg497a_hp_12500_mpu_w\/comware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:jh198a_hp_10500_type_d_main_processing_unit_with_comware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-5434
- 2026-10-03 Alias added: GHSA-c9pv-4v8h-fhc4
References
Sources
- CVE-2015-5434 · CVE Program
- CVE-2015-5434 · NVD
- FIRST EPSS
- GHSA-c9pv-4v8h-fhc4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences