CVE-2012-0133 Other in n/a
A virus on the switch's compact flash card allows remote code execution on a PC if the user manually transfers the card.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-0133?
CVE-2012-0133 is a low-severity vulnerability in n/a, published on 12 Apr 2012. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card.
Which versions are affected by CVE-2012-0133?
It affects 14 products.
Products include Hp Procurve Switch 5400zl, Hp Procurve Switch 5400zl Management Module, Hp Procurve Switch 5406-44g-Poe\+-4sfpzl, Hp Procurve Switch 5406-48gzl, Hp Procurve Switch 5406zl-44g-Poe\+\/2xg Sfp\+ V2, Hp Procurve Switch 5406zl-44g-Poe\+\/4g Sfp\+ V2 and 8 more.
How do I fix CVE-2012-0133?
No fix has been published for CVE-2012-0133 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-0133 being exploited?
There is no known exploitation of CVE-2012-0133 in the wild and no public exploit code.
Sources
Also known as GHSA-r933-xg34-3423.