SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2010-3287

Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code…

HIGH 8.3EPSS 1.89%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0
8.3 HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C
EPSS
1.89% probability · 78th percentile
CISA KEV
Not listed
Affected
hp/procurve access point software · hp/procurve m110 access point · hp/procurve miltope dual radio access point · hp/procurve msm310-r access point · hp/procurve msm310 access point · hp/procurve msm320-r access point · hp/procurve msm320 access point · hp/procurve msm325 access point · hp/procurve msm335 access point · hp/procurve msm410 access point · hp/procurve msm422 access point · hp/procurve msm710 access controller · hp/procurve msm710 mobility controller · hp/procurve msm730 access controller · hp/procurve msm730 mobility controller · hp/procurve msm750 access controller · hp/procurve msm750 mobility controller · hp/procurve multi service access point miltope nmap
Source
hp-security-alert@hp.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.