CVE-2008-0708 Supply chain in n/a
HP USB floppy drives shipped with pre-installed malware that executes if the server lacks up-to-date antivirus detection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2008-0708?
CVE-2008-0708 is a medium-severity vulnerability in n/a, published on 6 Apr 2008. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.
Which versions are affected by CVE-2008-0708?
It affects 3 products.
Products include Hp 442084-B21, Hp 442085-B21, Hp Proliant.
How do I fix CVE-2008-0708?
No fix has been published for CVE-2008-0708 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-0708 being exploited?
There is no known exploitation of CVE-2008-0708 in the wild and no public exploit code.
Sources
Also known as GHSA-x9jf-g794-6pc5.