CVE-2017-5786 — MEDIUM (5.5)

Q: What is CVE-2017-5786?

CVE-2017-5786 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14

Q: How severe is CVE-2017-5786?

CVE-2017-5786 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2017-5786?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Officeconnect 1820 8G Switch J9979A Firmware, Hp Officeconnect 1820 8G Switch J9979A, Hp Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A Firmware, Hp Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A, Hp Officeconnect 1820 24G Switch J9980A Firmware.

Vulnerability Description

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Hp	Officeconnect 1820 8G Switch J9979A Firmware	<= pt.01.14
Hp	Officeconnect 1820 8G Switch J9979A	-
Hp	Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A Firmware	>= pt.01.03, <= pt.01.14
Hp	Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A	-
Hp	Officeconnect 1820 24G Switch J9980A Firmware	>= pt.01.03, <= pt.01.14
Hp	Officeconnect 1820 24G Switch J9980A	-
Hp	Officeconnect 1820 48G Poe\+ \(370W\) Switch J9984A Firmware	>= pt.01.03, <= pt.01.14
Hp	Officeconnect 1820 48G Poe\+ \(370W\) Switch J9984A	-
Hp	Officeconnect 1820 48G Switch J9981A Firmware	>= pt.01.03, <= pt.01.14
Hp	Officeconnect 1820 48G Switch J9981A	-
Hp	Officeconnect 1820 8G Poe\+ \(65W\) Switch J9982A Firmware	>= pt.01.03, <= pt.01.14
Hp	Officeconnect 1820 8G Poe\+ \(65W\) Switch J9982A	-

References

http://www.securityfocus.com/bid/96149Third Party AdvisoryVDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05388948Vendor Advisory
http://www.securityfocus.com/bid/96149Third Party AdvisoryVDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05388948Vendor Advisory

FAQ

What is CVE-2017-5786?

CVE-2017-5786 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14

How severe is CVE-2017-5786?

CVE-2017-5786 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-5786?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Officeconnect 1820 8G Switch J9979A Firmware, Hp Officeconnect 1820 8G Switch J9979A, Hp Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A Firmware, Hp Officeconnect 1820 24G Poe\+ \(185W\) Switch J9983A, Hp Officeconnect 1820 24G Switch J9980A Firmware.