Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HP ProCurve 5400 zl Switch, Flash Cards Infected with Malware - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
HP ProCurve 5400 zl Switch, Flash Cards Infected with Malware

HP ProCurve 5400 zl Switch, Flash Cards Infected with Malware

HP has released a security bulletin (CVE-2012-0133) indicating that a "[...] vulnerability has been identified with certain HP ProCurve 5400 zl switches containing compact flash cards which may be infected with a virus. Reuse of an infected compact flash card in a personal computer could result in a compromise of that system's integrity." [1]

A list of of HP 5400 zl series switch purchased after April 30, 2011 with their serial numbers as well as a resolution is posted here.

[1] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03249176

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

Guy

424 Posts
ISC Handler
Thanks for the update on this we had just purchased an HP switch recently. Having this alert helped us jump start the process to find out if we had one of those flash cards.

Thanks!
http://mjddesign.wordpress.com
Guy
15 Posts Posts

Sign Up for Free or Log In to start participating in the conversation!