CVE-2013-4840 Denial of service in n/a
Remote attackers can cause a denial of service in HP and H3C VPN Firewall Module products via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-4840?
CVE-2013-4840 is a high-severity denial of service vulnerability in n/a, published on 28 Jul 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.
Which versions are affected by CVE-2013-4840?
It affects 17 products.
Products include H3c F1000-E Vpn Firewall, H3c S5820 Secblade Vpn Firewall Module, H3c S7500e Secblade Vpn Firewall Module, H3c S9500e Secblade Vpn Firewall Module, H3c Secbladefw, H3c Secpath1000fe and 11 more.
How do I fix CVE-2013-4840?
No fix has been published for CVE-2013-4840 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2013-4840 being exploited?
There is no known exploitation of CVE-2013-4840 in the wild and no public exploit code.
Sources
Also known as GHSA-xrgv-hpqj-2pcx.