-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c03515685 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515685 Version: 2 HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2012-10-25 Last Updated: 2012-10-25 Potential Security Impact: Remote disclosure of information Source: Hewlett-Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP, 3COM, and H3C routers and switches. The vulnerabilities could be remotely exploited resulting in disclosure of information. For more information, refer to CERT VU#225404 on the CERT website. References: SSRT100962, CVE-2012-3268, CERT VU#225404 SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. Vendor Product Name Product Number HP 10500/7500 Advanced VPN Firewall Module JD249A H3C S7500E SecBlade VPN Firewall Module 0231A832, LSQ1FWBSC0 HP 10504 Switch Chassis JC613A HP 10508 Switch Chassis JC612A HP 10508-V Switch Chassis JC611A HP 10512 Switch Chassis JC748A HP 12500 VPN Firewall Module JC635A HP 12508 DC Switch Chassis JC652A HP 12508 Switch Chassis JC086A H3C S12508 Chassis 0235A38N HP 12508 Switch Chassis JF431A HP A12508 Switch Chassis H3C S12508 Chassis 0235A0E6 HP 12508 Switch Chassis JF431B HP A12508 Switch Chassis H3C S12508 (AC-1) Routing Switch 0235A0GE HP 12508 Switch Chassis JF431C HP 12518 DC Switch Chassis JC653A HP 12518 DC Switch Chassis JC653A HP 12518 Switch Chassis JC085A HP A12518 Switch Chassis H3C S12518 Chassis 0235A38M HP 12518 Switch Chassis JF430A HP A12518 Switch Chassis H3C S12518 Chassis 0235A0E7 HP 12518 Switch Chassis JF430B HP A12518 Switch Chassis H3C S12518 (AC-1) Routing Switch 0235A0GF HP 12518 Switch Chassis JF430C HP 1910-16G Switch JE005A 3Com Baseline Plus 2900G Switch - 20 port 3CRBSG2093 HP 1910-24G Switch JE006A 3Com Baseline Plus 2900G Switch - 28 port 3CRBSG2893 HP 1910-24G-PoE (365W) Switch JE007A 3Com Baseline Plus 2900G Switch - 28HPWR 3CRBSG28HPWR93 HP 1910-24G-PoE (170W) Switch JE008A HP V1910-24G-PoE (170W) Switch 3Com Baseline Plus 2900G Switch - 28PWR 3CRBSG28PWR93 HP 1910-48G Switch JE009A 3Com Baseline Plus 2900 Switch Gigabit Family - 52 port 3CRBSG5293 HP 1910-8G Switch JG348A HP 1910-8G-PoE+ (180W) Switch JG350A HP 1910-8G-PoE+ (65W) Switch JG349A HP 200-CS UTM Appliance JD268A H3C SecPath U200-CS 0235A0CT HP 200-M UTM Appliance JD274A HP 3000-10G-PoE+ Wireless Switch JD450A HP A3000-10G-PoE+ Wireless Switch H3C WX3010,8 PoEPlus 0235A37U HP 3000-24G-PoE+ Wireless Switch JD449A HP A3000-24G-PoE+ Wireless Switch H3C WX3024,4SFPCombo Plus Slot Plus PoEPlus 0235A37T HP 3000-8G-PoE+ Wireless Switch JD444A H3C WX3008, 4 POE Plus 0235A0AS HP 3012 Router JD916A 3Com 3012 Router 3C13612 HP 3013 Router JD917A 3Com 3013 Router 3C13613 HP 3016 Router JD918A 3Com 3016 Router 3C13616 HP 3036 Router JD921A 3Com 3036 Router 3C13636 HP 3040 Router JD922A 3Com 3040 Router 3C13640 HP 3041 Router JD923A 3Com 3041 Router 3C13641 HP 3100-16 DC EI Switch JD314A HP A3100-16 DC EI Switch H3C S3100-16TP-EI - model LS-3100-16TP-EI-H3-D-O 0235A23H HP 3100-16 EI Switch JD319A H3C S3100-16TP-EI - model LS-3100-16TP-EI-H3-A-O 0235A300 HP 3100-16 SI Switch JD305A H3C S3100-16T-SI - model LS-S3100-16T-SI-AC-OVS 0235A15C HP 3100-16 v2 EI Switch JD319B HP 3100-16 v2 SI Switch JG222A HP 3100-16-PoE EI Switch JD312A H3C S3100-16TP-PWR-EI - model LS-3100-16TP-PWR-EI-H3 0235A19C HP 3100-24 DC EI Switch JD315A HP A3100-24 DC EI Switch H3C S3100-26TP-EI - model LS-3100-26TP-EI-H3-D-O 0235A23P HP 3100-24 EI Switch JD320A HP A3100-24 EI Switch H3C S3100-26TP-EI - model LS-3100-26TP-EI-H3-A-O 0235A301 HP 3100-24 SI Switch JD306A HP A3100-24 SI Switch H3C S3100-26T-SI - model LS-S3100-26T-SI-AC-OVS 0235A15D HP 3100-24 v2 EI Switch JD320B HP 3100-24 v2 SI Switch JG223A HP 3100-24-PoE EI Switch JD313A HP A3100-24-PoE EI Switch H3C S3100-26TP-PWR-EI - model LS-3100-26TP-PWR-EI-H3 0235A19D HP 3100-24-PoE v2 EI Switch JD313B HP 3100-48 Switch JD317A H3C S3100-52P - model LS-3100-52P-OVS-H3 0235A248 HP 3100-48 v2 Switch JG315A HP 3100-8 DC EI Switch JD316A H3C S3100-8TP-EI - model LS-3100-8TP-EI-H3-D-O 0235A23T HP 3100-8 EI Switch JD318A H3C S3100-8TP-EI - model LS-3100-8TP-EI-H3-A-O 0235A29Y HP 3100-8 SI Switch JD304A HP A3100-8 SI Switch H3C S3100-8T-SI - model LS-S3100-8T-SI-AC-OVS 0235A15B HP 3100-8 SI Switch JD307A H3C S3100-8C-SI - model LS-S3100-8C-SI-AC-OVS 0235A15F HP 3100-8 v2 EI Switch JD318B HP 3100-8 v2 SI Switch JG221A HP 3100-8-PoE EI Switch JD311A H3C S3100-8TP-PWR-EI - model LS-3100-8TP-PWR-EI-H3 0235A19B HP 3600-24 EI Switch JD331A HP A3600-24 EI Switch H3C S3600-28P-EI - model LS-3600-28P-EI-OVS 0235A10H HP 3600-24 SI Switch JD330A HP A3600-24 SI Switch H3C S3600-28P-SI - model LS-3600-28P-SI-OVS 0235A10G HP 3600-24 v2 EI Switch JG299A HP 3600-24 v2 SI Switch JG304A HP 3600-24-PoE EI Switch JD326A HP A3600-24-PoE EI Switch H3C S3600-28P-PWR-EI - model LS-3600-28P-PWR-EI-OVS 0235A10C HP 3600-24-PoE SI Switch JD325A HP A3600-24-PoE SI Switch H3C S3600-28P-PWR-SI - model LS-3600-28P-PWR-SI-OVS 0235A10B HP 3600-24-PoE+ v2 EI Switch JG301A HP 3600-24-SFP EI Switch JD334A HP A3600-24-SFP EI Switch H3C S3600-28F-EI - model LS-3600-28F-EI-OVS 0235A10L HP 3600-24-SFP v2 EI Switch JG303A HP 3600-24TP SI Switch JD329A HP A3600-24TP SI Switch H3C S3600-28TP-SI - model LS-3600-28TP-SI-OVS 0235A10F HP 3600-48 EI Switch JD333A HP A3600-48 EI Switch H3C S3600-52P-EI - model LS-3600-52P-EI-OVS 0235A10K HP 3600-48 SI Switch JD332A H3C S3600-52P-SI - model LS-3600-52P-SI-OVS 0235A10J HP 3600-48 v2 EI Switch JG300A HP 3600-48 v2 SI Switch JG305A HP 3600-48-PoE EI Switch JD328A HP A3600-48-PoE EI Switch H3C S3600-52P-PWR-EI - model LS-3600-52P-PWR-EI-OVS 0235A10E HP 3600-48-PoE SI Switch JD327A HP A3600-48-PoE SI Switch H3C S3600-52P-PWR-SI - model LS-3600-52P-PWR-SI-OVS 0235A10D HP 3600-48-PoE+ v2 EI Switch JG302A HP 3600-48-PoE+ v2 SI Switch JG307A HP 3610-24-2G-2G-SFP Switch JD337A HP A3610-24-2G-SFP Switch H3C S3610-28TP - model LS-3610-28TP-OVS 0235A22E HP 3610-24-4G-SFP Switch JD336A HP A3610-24-4G Switch H3C S3610-28P - model LS-3610-28P-OVS 0235A22D HP 3610-24-SFP Switch JD338A HP A3610-24-SFP Switch H3C S3610-28F - model LS-3610-28F-OVS 0235A22F HP 3610-48 Switch JD335A HP A3610-48 Switch H3C S3610-52P - model LS-3610-52P-OVS 0235A22C HP 4200-12G Switch JE015A HP E4200-12G Switch 3Com 4200G Switch 12-Port 3CR17660-91 HP 4210-16 Switch JE024A HP E4210-16 Switch 3Com 4210 Switch 18-Port 3CR17332-91 HP 4210-16 Switch JE025A 3Com SWITCH 4210 18-Port 3CR17332A-91 HP 4210-24 Switch JE026A 3Com 4210 Switch 26-Port 3CR17333-91 HP 4210-24 Switch JF427A HP E4210-24 Switch 3Com 4210 Switch 26-Port 3CR17333A-91 HP 4210-24G Switch JF844A HP E4210-24G Switch 3Com 4210-24G Switch 3CRS42G-24-91 HP 4210-24G-PoE Switch JF846A HP E4210-24G-PoE Switch 3Com Switch E4210-24G-PoE 3CRS42G-24P-91 HP 4210-24-PoE Switch JE032A 3Com 4210 Switch PWR 26-Port 3CR17343-91 HP 4210-24-PoE Switch JE033A 3Com 4210 PWR Switch 26-Port 3CR17343A-91 HP 4210-48 Switch JE027A 3Com 4210 Switch 52-Port 3CR17334-91 HP 4210-48G Switch JF845A HP E4210-48G Switch 3Com 4210-48G Switch 3CRS42G-48-91 HP 4210-8 Switch JE021A 3Com 4210 Switch 9-Port 3CR17331-91 HP 4210-8 Switch JE022A 3Com 4210 Switch 9-Port 3CR17331A-91 HP 4210-8-PoE Switch JE028A 3Com 4210 PWR Switch 9-Port 3CR17341-91 HP 4210-8-PoE Switch JE029A 3Com 4210 PWR Switch 9-Port 3CR17341A-91 HP 4500-24 Switch JE045A 3Com 4500 Switch 26-Port 3CR17561-91 HP 4500-24G-PoE Switch JE061A 3Com 4500G PWR Switch 24-Port 3CR17771-91 HP 4500-24-PoE Switch JE047A 3Com 4500 PWR Switch 26-Port 3CR17571-91 HP 4500-48 Switch JE046A 3Com 4500 Switch 50-Port 3CR17562-91 HP 4500-48G-PoE Switch JE063A HP E4500-48G-PoE Switch 3Com 4500G PWR Switch 48-Port 3CR17772-91 HP 4500-48-PoE Switch JE048A 3Com 4500 PWR Switch 50-Port 3CR17572-91 HP 4510-24G Switch JF847A HP E4510-24G Switch 3Com Switch E4510-24G 3CRS45G-24-91 HP 4510-48G Switch JF428A HP E4510-48G Switch 3Com 4510G Switch 48 Port 3CRS45G-48-91 HP 4800-24G Switch JD007A 3Com 4800G Switch 24-Port 3CRS48G-24-91 HP 4800-24G-PoE Switch JD008A 3Com 4800G PWR Switch 24-Port 3CRS48G-24P-91 HP 4800-24G-SFP Switch JD009A HP E4800-24G-SFP Switch 3Com 4800G Switch 24-Port SFP 3CRS48G-24S-91 HP 4800-48G Switch JD010A 3Com 4800G Switch 48-Port 3CRS48G-48-91 HP 4800-48G-PoE Switch JD011A 3Com 4800G PWR Switch 48-Port 3CRS48G-48P-91 HP 5012 Router JD935A 3Com 5012 Router 3C13701 HP 5120-16G SI Switch JE073A H3C S5120-20P-SI L2, 16GE Plus 4SFP 0235A42B HP 5120-24G EI TAA-compliant Switch with 2 Interface Slots JG245A HP 5120-24G SI Switch JE074A H3C S5120-28P-SI 24GE Plus 4 SFP 0235A42D HP 5120-24G-PoE+ (170W) SI Switch JG092A H3C S5120-28P-PWR-SI 0235A0E3 HP 5120-24G-PoE+ (370W) SI Switch JG091A H3C S5120-28P-HPWR-SI 0235A0E5 HP 5120-24G-PoE+ EI Switch with 2 Interface Slots JG236A HP 5120-24G-PoE+ EI TAA-compliant Switch with 2 Slots JG247A HP 5120-48G EI TAA-compliant Switch with 2 Interface Slots JG246A HP 5120-48G SI Switch JE072A HP A5120-48G SI Switch H3C S5120-52P-SI 48GE Plus 4 SFP 0235A41W HP 5120-48G-PoE+ EI Switch with 2 Interface Slots JG237A HP 5120-48G-PoE+ EI TAA-compliant Switch with 2 Slots JG248A HP 5232 Router JD943A 3Com 5232 Router 3C13751 HP 5500-24G DC EI Switch JD373A H3C S5500-28C-EI-DC,Ethernet Switch 0235A24S HP 5500-24G EI Switch JD377A H3C S5500-28C-EI,Ethernet Switch 0235A253 HP 5500-24G EI TAA-compliant Switch with 2 Interface Slots JG250A HP 5500-24G SI Switch JD369A H3C S5500-28C-SI,Ethernet Switch 0235A04U HP 5500-24G-4SFP HI Switch with 2 Interface Slots JG311A HP 5500-24G-PoE EI Switch JD378A H3C S5500-28C-PWR-EI,Ethernet Switch 0235A255 HP 5500-24G-PoE SI Switch JD371A H3C S5500-28C-PWR-SI,Ethernet Switch 0235A05H HP 5500-24G-PoE+ EI Switch with 2 Interface Slots JG241A HP 5500-24G-PoE+ EI TAA-compliant Switch with 2 Interface Slots JG252A HP 5500-24G-PoE+ SI Switch with 2 Interface Slots JG238A HP 5500-24G-SFP DC EI Switch JD379A H3C S5500-28F-EI,Eth Swtch,DC Single Pwr 0235A259 HP 5500-24G-SFP EI Switch JD374A H3C S5500-28F-EI,Eth Switch,AC Single 0235A24U HP 5500-24G-SFP EI TAA-compliant Switch with 2 Interface Slots JG249A HP 5500-48G EI Switch JD375A H3C S5500-52C-EI,Ethernet Switch 0235A24X HP 5500-48G EI TAA-compliant Switch with 2 Interface Slots JG251A HP 5500-48G SI Switch JD370A H3C S5500-52C-SI,Ethernet Switch 0235A04V HP 5500-48G-4SFP HI Switch with 2 Interface Slots JG312A HP 5500-48G-PoE EI Switch JD376A H3C S5500-52C-PWR-EI,Ethernet Switch 0235A251 HP 5500-48G-PoE SI Switch JD372A H3C S5500-52C-PWR-SI,Ethernet Switch 0235A05J HP 5500-48G-PoE+ EI Switch with 2 Interface Slots JG240A HP 5500-48G-PoE+ EI TAA-compliant Switch with 2 Interface Slots JG253A HP 5500-48G-PoE+ SI Switch with 2 Interface Slots JG239A HP 5500G-24 EI 10/100/1000 No Power Supply Unit Switch JF551A 3Com SS4 5500G-EI Switch 24PT (NO PSU) 3CR17254-91 HP 5500G-24 EI SFP No Power Supply Unit Switch JF553A 3Com SS4 5500G-EI 24 Port,SFP (NO PSU) 3CR17259-91 HP 5500G-48 EI 10/100/1000 No Power Supply Unit Switch JF552A 3Com SS4 5500G-EI Switch 48PT (NO PSU) 3CR17255-91 HP 5682 Router JD946A 3Com 5682 Router 3C13759 HP 5800-24G Switch JC100A H3C S5800-32C - 24-port 1BT Plus 4-port (SFP Plus ) Plus 1 media slot 0235A36U HP 5800-24G TAA-compliant Switch JG255A HP 5800-24G-PoE Switch JC099A H3C S5800-32C-PWR - 24-port 10/100/1000BASE-T (RJ45) Plus 4-port 10GBASE-X (SFP Plus ) Plus 1 media module, PoE 0235A36S HP 5800-24G-PoE+ TAA-compliant Switch JG254A HP 5800-24G-SFP Switch JC103A H3C S5800-32F 24-port 1000BASE-X (SFP) Plus 4-port 10GBASE-X (SFP Plus ) Plus media module (no power) 0235A374 HP 5800-24G-SFP TAA-compliant Switch with 1 Interface Slot JG256A HP 5800-48G Switch JC105A H3C S5800-56C 48-port 10/100/1000BASE-T (RJ45) Plus 4port 10GBASE-X (SFP Plus ) Plus media module 0235A379 HP 5800-48G Switch with 2 Slots JC101A H3C S5800-60C-PWR 48-port BT Plus 4-port SFP Plus 2 media modules Plus OSM 0235A36W HP 5800-48G TAA-compliant Switch with 1 Interface Slot JG258A HP 5800-48G-PoE Switch JC104A H3C S5800-56C-PWR 48-port BT Plus 4 port (SFP Plus ) Plus media module 0235A378 HP 5800-48G-PoE+ TAA-compliant Switch with 1 Interface Slot JG257A HP 5800-48G-PoE+ TAA-compliant Switch with 2 Interface Slots JG242A HP 5800AF-48G Switch JG225A HP 5810-48G Switch JF242A HP A5810-48G with 2 SFP+ slots AC Switch H3C S5810 48-BT, 2 SFP Plus , AC 0235A42H HP 5820 VPN Firewall Module JD255A HP A5820 VPN Firewall Module H3C S5820 SecBlade VPN Firewall Module LSWM1FW10, 0231A94J HP 5830 CTO Built Switch JG478A HP 5830AF-48G Switch with 1 Interface Slot JC691A HP 5830AF-96G Switch JC694A HP 6600 Firewall Processing Router Module JD250A HP A6600 Firewall Processing Module H3C SR66 Gigabit Firewall Module 0231A88A HP 6600 RPE-X1 Router Module JC165A HP A6600 RPE-X1 Main Processing Unit H3C RT-SR66-RPE-X1-H3 RPE-X1, 0231A761 HP 6600 RSE-X1 Router Main Processing Unit JC566A HP 6602 Router Chassis JC176A HP A6602 Router H3C SR6602 1U Router Host 0235A27D HP 6604 Router Chassis JC178A HP A6604 Router Chassis H3C RT-SR6604-OVS-H3 0235A37X HP 6604 Router Chassis JC178B HP 6608 Router JC177A HP A6608 Router H3C RT-SR6608-OVS-H3 0235A32X HP 6608 Router Chassis JC177B HP 6616 Router Chassis JC496A HP A6616 Router Chassis H3C SR6616 Router Chassis 0235A41D HP 7500 384Gbps Fabric Module JD194A HP A7500 384Gbps Fabric/Main Processing Unit H3C S7500E 384 Gbps Fabric 0231A73K HP 7500 384Gbps Fabric Module with 2 XFP Ports JD193A HP A7500 384Gbps Fabric/Main Processing Unit with 2 10GbE XFP Ports H3C S7500E 384 Gbps Fabric w/ 2-port 10GBASE-X (XFP) 0231A73J HP 7500 384Gbps Fabric Module with 2 XFP Ports JD193B HP A7500 384Gbps Fabric/Main Processing Unit with 2 10GbE XFP Ports H3C S7500E Salience VI-10G Switch and Route Processing Unit,with 2 XFP Interfaces LSQ1SRP2XB0, 0231A0KW HP 7500 384Gbps TAA-compliant Fabric / Main Processing Unit JC700A HP 7500 384Gbps TAA-compliant Fabric / MPU with 2 10GbE XFP Ports JC699A HP 7500 768Gbps Fabric Module JD220A HP A7510 768Gbps Fabric/Main Processing Unit H3C S7510E 768 Gbps Fabric LSQ1SRPD0, 0231A86P HP 7500 768Gbps TAA-compliant Fabric / Main Processing Unit JC701A HP A7510 768Gbps TAA-compliant Fabric/Main Processing Unit HP 7502 Switch Chassis JD242A HP A7502 Switch Chassis H3C S7502E Chassis w/ fans 0235A29A HP 7502 Switch Chassis JD242B H3C S7502E Ethernet Switch Chassis with Fan 0235A0G4 HP 7502 TAA-compliant Main Processing Unit JC697A HP A7502 TAA-compliant Main Processing Unit HP 7503 Switch Chassis JD240A HP A7503 Switch Chassis H3C S7503E Chassis w/ fans 0235A27R HP 7503 Switch Chassis JD240B HP A7503 Switch Chassis H3C S7503E Ethernet Switch Chassis with Fan 0235A0G2 HP 7503 Switch Chassis with 1 Fabric Slot JD243A HP A7503-S Switch Chassis H3C S7503E-S Chassis w/ fans 0235A33R HP 7503 Switch Chassis with 1 Fabric Slot JD243B H3C S7503E-S Ethernet Switch Chassis with Fan 0235A0G5 HP 7503-S 144Gbps Fabric/MPU with PoE Upgradable 20-port Gig-T/4-port GbE Combo JC666A HP 7503-S 144Gbps TAA Fabric / MPU with 16 GbE SFP Ports and 8 GbE Combo Ports JC698A HP 7506 Switch Chassis JD239A HP A7506 Switch Chassis H3C S7506E Chassis w/ fans 0235A27Q HP 7506 Switch Chassis JD239B HP A7506 Switch Chassis H3C S7506E Ethernet Switch Chassis with Fan 0235A0G1 HP 7506 Vertical Switch Chassis JD241A HP A7506-V Switch Chassis H3C S7506E-V Chassis w/ fans 0235A27S HP 7506 Vertical Switch Chassis JD241B HP A7506-V Switch Chassis H3C S7506E-V Ethernet Switch Chassis with Fan 0235A0G3 HP 7510 Switch Chassis JD238A HP A7510 Switch Chassis H3C S7510E Chassis w/ fans 0235A25N HP 7510 Switch Chassis JD238B HP A7510 Switch Chassis H3C S7510E Ethernet Switch Chassis with Fan 0235A0G0 HP 8800 Firewall Processing Module JD251A H3C SR88 Firewall Processing Module 0231A88L HP 8802 Router Chassis JC147A HP A8802 Router Chassis H3C SR8802 10G Core Router Chassis 0235A31B HP 8802 Router Chassis JC147B HP A8802 Router Chassis H3C SR8802 10G Core Router Chassis 0235A0GC HP 8805 Router Chassis JC148A HP A8805 Router Chassis H3C SR8805 10G Core Router Chassis 0235A31C HP 8805 Router Chassis JC148B HP A8805 Router Chassis H3C SR8805 10G Core Router Chassis 0235A0G8 HP 8807 7-slot Chassis Kit JE203A 3Com 8807 Switch 7-slot Chassis Kit 3C17543 HP 8807 Kit (TAA) Switch JE204A 3Com SW8807 Kit TAA 3C17543TAA HP 8808 Router Chassis JC149A HP A8808 Router Chassis H3C SR8808 10G Core Router Chassis 0235A31D HP 8808 Router Chassis JC149B HP A8808 Router Chassis H3C SR8808 10G Core Router Chassis 0235A0G9 HP 8810 10-slot AC (TAA) Chassis Kit JE201A 3Com SW8810 AC Chassis Kit TAA 3C17541TAA HP 8810 10-slot Chassis Kit JE200A 3Com 8810 Switch 10-slot Chassis Kit 3C17541 HP 8812 Router Chassis JC150A HP A8812 Router Chassis H3C SR8812 10G Core Router Chassis 0235A31E HP 8812 Router Chassis JC150B HP A8812 Router Chassis H3C SR8812 10G Core Router Chassis 0235A0GA HP 8814 14-slot AC (TAA) Chassis Kit JE199A 3Com SW8814 AC Chassis Kit TAA 3C17540TAA HP 8814 14-slot Chassis Kit JE198A 3Com 8814 Switch 14-slot Chassis Kit 3C17540 HP 9500 VPN Firewall Module JD245A H3C S9500E SecBlade VPN Firewall Module LSR1FW2A1, 0231A0AV HP 9505 Switch Chassis JC124B HP A9505 Switch Chassis H3C S9505E Routing-Switch Chassis 0235A0G6 HP 9508-V Switch Chassis JC474A H3C S9508E-V Routing-Switch Chassis 0235A38Q HP 9508-V Switch Chassis JC474B H3C S9508E-V Routing-Switch Chassis 0235A38Q HP 9512 Switch Chassis JC125A HP A9512 Switch Chassis H3C S9512E Chassis w/ Fans 0235A38R HP 9512 Switch Chassis JC125B HP A9512 Switch Chassis H3C S9512E Routing-Switch Chassis 0235A0G7 HP A3100 (LS6MCFL1UB) Ethernet Switch JE545A H3C S3100 Ethernet Switch,LS6MCFL1UB,Sin 0231A65T HP A3100-16 DC SI 2-slot Switch JD302A H3C S3100-16C-SI - model LS-S3100-16C-SI-DC-OVS 0235A14V HP A3100-16 SI with 2 External Slots Switch JD308A H3C S3100-16C-SI - model LS-S3100-16C-SI-AC-OVS 0235A15G HP A3100-24 DC SI 2-slot Switch JD303A H3C S3100-26C-SI - model LS-S3100-26C-SI-DC-OVS 0235A14W HP A3100-24 SI 2-slot Switch JD309A H3C S3100-26C-SI - model LS-S3100-26C-SI-AC-OVS 0235A15H HP A3100-26C-EPON-EI Switch JG059A HP A3100-8 SI 1-slot Switch JD310A H3C S3100-8C-SI - model LS-S3100-8C-SI-DC-OVS 0235A15J HP A5100-16G EI Switch JD351A H3C S5100-16P-EI - model LS-5100-16P-EI-OVS-H3 0235A21Q HP A5100-16G SI Switch JD356A H3C S5100-16P-SI - model LS-5100-16P-SI-OVS-H3 0235A22R HP A5100-16G-PoE EI Switch JD353A H3C S5100-16P-PWR-EI - model LS-5100-16P-PWR-EI-OVS 0235A22K HP A5100-24G EI Switch JD346A H3C S5100-24P-EI - model LS-5100-24P-EI-OVS 0235A08K HP A5100-24G EI Switch with SFP Uplink JD344A H3C S5100-26C-EI - model LS-5100-26C-EI-OVS 0235A08F HP A5100-24G SI Switch JD348A H3C S5100-24P-SI - model LS-5100-24P-SI-OVS-H3 0235A20Q HP A5100-24G-PoE EI Switch JD354A H3C S5100-26C-PWR-EI - model LS-5100-26C-PWR-EI-OVS 0235A22M HP A5100-48G EI Switch JD347A H3C S5100-48P-EI - model LS-5100-48P-EI-OVS 0235A08M HP A5100-48G EI Switch with SFP Uplink JD345A H3C S5100-50C-EI - model LS-5100-50C-EI-OVS 0235A08H HP A5100-48G SI Switch JD349A H3C S5100-48P-SI - model LS-5100-48P-SI-OVS-H3 0235A20R HP A5100-48G-PoE EI Switch JD355A H3C S5100-50C-PWR-EI - model LS-5100-50C-PWR-EI-OVS 0235A22P HP A5100-8G EI Switch JD350A H3C S5100-8P-EI - model LS-5100-8P-EI-OVS-H3 0235A21P HP A5100-8G SI Switch JD357A H3C S5100-8P-SI - model LS-5100-8P-SI-OVS-H3 0235A22T HP A5100-8G-PoE EI Switch JD352A H3C S5100-8P-PWR-EI - model LS-5100-8P-PWR-EI-OVS 0235A22H HP A5120-24G EI Switch JE066A H3C S5120-24P-EI 24GE Plus 4ComboSFP 0235A0BQ HP A5120-24G EI Switch with 2 Interface Slots JE068A H3C S5120-28C-EI 24GE Plus 4Combo Plus 2Slt 0235A0BS HP A5120-24G-PoE EI 2-slot Switch JE070A H3C S5120-28C-PWR-EI 24G Plus 4C Plus 2S Plus POE 0235A0BU HP A5120-48G EI Switch JE067A H3C S5120-48P-EI 48GE Plus 4ComboSFP 0235A0BR HP A5120-48G EI Switch with 2 Interface Slots JE069A H3C S5120-52C-EI 48GE Plus 4Combo Plus 2Slt 0235A0BT HP A5120-48G-PoE EI 2-slot Switch JE071A H3C S5120-52C-PWR-EI 48G Plus 4C Plus 2S Plus POE 0235A0BV HP A6604 Router Bundle with RPE-X1 Modules and Power Supply JE528A H3C SR6604 Router Bundle with RPE-X1 and Pow 0150A12B HP A6604 Router with 2 RPE-X1 Modules JC158A H3C RT-SR6604-OVS Plus 2 RPE-X1 Plus 2 AC-H3 0150A12C HP A6608 Router (RT-SR6608-OVS+2 RPE-X1+2 AC-H3) Bundle JE527A H3C RT-SR6608-OVS Plus 2 RPE-X1 Plus 2 AC-H3 0150A12A HP A6608 Router Bundle with RPE-X1 Modules and Power Supply JE526A H3C SR6608 Router Bundle with RPE-X1 and Pow 0150A129 HP A9508 Switch Chassis JC124A H3C S9505E Chassis w/ Fans 0235A38P HP A-MSR20-15 A Multi-service Router JD670A H3C MSR 20-15 A 0235A31Q HP A-MSR20-15 AW Multi-service Router JD671A H3C MSR 20-15 A W 0235A31R HP A-MSR20-15 I Multi-service Router JD672A H3C MSR 20-15 I 0235A31N HP A-MSR20-15 IW Multi-service Router JD667A H3C MSR 20-15 IW 0235A31P HP A-MSR20-21 Router JD432A H3C MSR-20-21 Router 0235A19J HP A-MSR20-21 Router JD663A H3C MSR 20-21 0235A325 HP A-MSR30-20 Multi-service Router Security Bundle JF286A H3C MSR 30-20 Router Host RTVZ33020AS, 0235A20S HP A-MSR30-40, RT-MSR3040-AC-OVS-AS-H3 Multi-service Router JF232A H3C RT-MSR3040-AC-OVS-AS-H3 0235A20V HP AR 18-31E Router JD172A H3C AR18-31E Router 0235A09T HP E4200-24 SI Switch JE013A 3Com 4200-SI Switch 28 Port 3C17304A HP E4200-24G Switch JE016A 3Com 4200G Switch 24-Port 3CR17661-91 HP E4200-24G-PoE Switch JE020A 3Com 4200G Switch PWR 24-Port 3CR17671-91 HP E4200-48 SI Switch JE012A 3Com 4200-SI Switch 50 Port 3C17302A HP E4200-48G Switch JE018A 3Com 4200G Switch 48-Port 3CR17662-91 HP E4210 8-port (TAA) Switch JE023A 3Com 4210 Switch 9-Port TAA 3CR17331TAA-91 HP E4210-16-PoE Switch JE031A 3Com 4210 Switch PWR 18-Port 3CR17342-91 HP E4210-8-PoE (TAA) Switch JE030A 3Com 4210 Switch PWR 9P TAA 3CR17341TAA-91 HP E4500-24G (TAA) Switch JE058A 3Com 4500G Switch 24-Port TAA 3CR17761TAA-91 HP E4500-24G Switch JE057A 3Com 4500G Switch 24-Port 3CR17761-91 HP E4500-24G-PoE (TAA) Switch JE062A 3Com 4500G PWR Switch 24-Port TAA 3CR17771TAA-91 HP E4500-48G (TAA) Switch JE060A 3Com 4500G Switch 48-Port TAA 3CR17762TAA-91 HP E4500-48G Switch JE059A 3Com 4500G Switch 48-Port 3CR17762-91 HP E4500-48G-PoE (TAA) Switch JE064A 3Com 4500G PWR Switch 48-Port TAA 3CR17772TAA-91 HP E5500-24 EI (TAA) Switch JE102A 3Com TAA 5500-EI Switch 28-Port 3CR17161TAA-91 HP E5500-24 SI Switch JE099A 3Com SS4 5500-SI Switch 28 Port 3CR17151-91 HP E5500-24 Switch JE101A 3Com 5500-EI Switch 28-Port 3CR17161-91 HP E5500-24G (TAA) Switch JE089A 3Com TAA COMPLIANT 5500G-EI 24-Port 3CR17250TAA-91 HP E5500-24G Switch JE088A 3Com 5500G-EI Switch 24 Port 3CR17250-91 HP E5500-24G-PoE (TAA) Switch JE093A 3Com TAA COMPLIANT 5500G-EI PWR 24P 3CR17252TAA-91 HP E5500-24G-PoE Switch JE092A 3Com 5500G-EI Switch PWR 24-Port 3CR17252-91 HP E5500-24G-SFP (TAA) Switch JE097A 3Com TAA COMPLIANT 5500G-EI SFP 24P 3CR17258TAA-91 HP E5500-24G-SFP Switch JE096A 3Com 5500G-EI Switch SFP 24-Port 3CR17258-91 HP E5500-24-PoE EI (TAA) Switch JE106A 3Com TAA 5500-EI PWR Switch 28-Port 3CR17171TAA-91 HP E5500-24-PoE Switch JE105A 3Com 5500-EI PWR Switch 28-Port 3CR17171-91 HP E5500-24-SFP Switch JE109A 3Com 5500-EI Switch 28-Port FX 3CR17181-91 HP E5500-24-SPF EI (TAA) Switch JE110A 3Com TAA SWITCH 5500-EI 28-Port FX 3CR17181TAA-91 HP E5500-48 EI (TAA) Switch JE104A 3Com TAA SWITCH 5500-EI 52-Port 3CR17162TAA-91 HP E5500-48 SI Switch JE100A 3Com SS4 SWITCH 5500-SI 52 Port 3CR17152-91 HP E5500-48 Switch JE103A 3Com 5500-EI Switch 52-Port 3CR17162-91 HP E5500-48G (TAA) Switch JE091A 3Com TAA COMPLIANT 5500G-EI 48-Port 3CR17251TAA-91 HP E5500-48G Switch JE090A 3Com 5500G-EI Switch 48-Port 3CR17251-91 HP E5500-48G-PoE (TAA) Switch JE095A 3Com TAA COMPLIANT 5500G-EI PWR 48P 3CR17253TAA-91 HP E5500-48G-PoE Switch JE094A 3Com 5500G-EI PWR Switch 48-Port 3CR17253-91 HP E5500-48-PoE EI (TAA) Switch JE108A 3Com TAA 5500-EI PWR Switch 52-Port 3CR17172TAA-91 HP E5500-48-PoE Switch JE107A 3Com 5500-EI PWR Switch 52-Port 3CR17172-91 HP E7902 Switch Chassis JE164A 3Com S7902E Chassis Kit w/ fans 3CS7902E HP E7903 1 Fabric Slot Switch Chassis JE166A 3Com S7903E-S Chassis Kit w/ fans 3CS7903ES HP E7903 Switch Chassis JE165A 3Com S7903E Chassis Kit w/ fans 3CS7903E HP E7906 Switch Chassis JE167A 3Com S7906E Chassis Kit w/ fans 3CS7906E HP E7906 Vertical Switch Chassis JE168A 3Com S7906E-V Chassis Kit w/ fans 3CS7906EV HP F1000-E VPN Firewall Appliance JD272A H3C F1000-E VPN Firewall 0235A26G HP F1000-EI VPN Firewall Appliance JG214A HP F1000-S-EI VPN Firewall Appliance JG213A HP F5000 Firewall Main Processing Unit JG215A HP MSR 50-40 Router JD655A H3C MSR 50-40 Chassis 0235A20N HP MSR20-10 Router JD431A H3C MSR 20-10 0235A0A7 HP MSR20-11 Router JD673A H3C MSR 20-11 0235A31V HP MSR20-11 Router JF239A H3C RT-MSR2011-AC-OVS-H3 0235A395 HP MSR20-12 Router JD674A H3C MSR 20-12 0235A32E HP MSR20-12 Router JF241A H3C RT-MSR2012-AC-OVS-H3 0235A396 HP MSR20-12-T Router JD676A H3C MSR 20-12 T1 0235A32B HP MSR20-12-T Router JF806A H3C RT-MSR2012-T-AC-OVS-H3 0235A398 HP MSR20-12-T-W Router (NA) JG209A HP MSR20-12-W Router JD675A H3C MSR20-12 W 0235A32G HP MSR20-12-W Router JF807A H3C RT-MSR2012-AC-OVS-W-H3 0235A397 HP MSR20-13 Router JD668A H3C MSR 20-13 0235A31W HP MSR20-13 Router JF240A H3C RT-MSR2013-AC-OVS-H3 0235A390 HP MSR20-13-W Router JD669A H3C MSR 20-13 W 0235A31X HP MSR20-13-W Router JF808A H3C RT-MSR2013-AC-OVS-W-H3 0235A391 HP MSR20-13-W Router (NA) JG210A HP MSR20-15 Router JF817A H3C MSR 20-15 Router Host (AC), 1 FE, 4 LSW, 1 ADSLoPOTS, 1 DSIC 0235A0A8 HP MSR20-15-A Router JF237A H3C RT-MSR2015-AC-OVS-A-H3 0235A392 HP MSR20-15-A-W Router JF809A H3C RT-MSR2015-AC-OVS-IW-H3 0235A38V HP MSR20-15-I Router JF236A H3C RT-MSR2015-AC-OVS-I-H3 0235A394 HP MSR20-15-I-W Router JF238A H3C RT-MSR2015-AC-OVS-AW-H3 0235A393 HP MSR20-20 Router JD662A HP A-MSR20-20 Router H3C MSR 20-20 0235A19H HP MSR20-20 Router JF283A H3C RT-MSR2020-AC-OVS-H3C 0235A324 HP MSR20-21 Router JD663B HP MSR20-40 Router JD664A H3C MSR 20-40 0235A19K HP MSR20-40 Router JF228A H3C RT-MSR2040-AC-OVS-H3 0235A326 HP MSR30-10 DC Router JG184A HP MSR30-10 Router JF816A H3C MSR 30-10 Router Host (AC), 2FE, 2SIC, 1XMIM, 256DDR 0235A39H HP MSR30-11 Router JF800A H3C RT-MSR3011-AC-OVS-H3 0235A29L HP MSR30-11E Router JG182A HP MSR30-11F Router JG183A HP MSR30-16 PoE Router JD659A H3C MSR 30-16 POE 0235A238 HP MSR30-16 PoE Router JF234A H3C RT-MSR3016-AC-POE-OVS-H3 0235A321 HP MSR30-16 Router JD665A H3C MSR 30-16 0235A237 HP MSR30-16 Router JF233A H3C RT-MSR3016-AC-OVS-H3 0235A327 HP MSR30-16 Router with VCX and 4-port FXO and 2-port FXS Modules JD025A HP A-MSR30-16 Router with VCX and 4-port FXO and 2-port FXS Modules 3Com MSR 3016 VCX CPM 4FXO/2FXS Bundle 3CRBVCXMSR03A HP MSR30-16 Router with VCX Enterprise Branch Communications MIM Module JD024A HP A-MSR30-16 Router with VCX Ent MIM Module 3Com MSR 3016 VCX Ent MIM Bundle 3CRBVCXMSR02A HP MSR30-20 DC Router JF235A H3C RT-MSR3020-DC-OVS-H3 0235A267 HP MSR30-20 PoE Router JD660A H3C MSR 30-20 POE 0235A239 HP MSR30-20 PoE Router JF802A H3C RT-MSR3020-AC-POE-OVS-H3 0235A322 HP MSR30-20 Router JD666A H3C MSR 30-20 0235A19L HP MSR30-20 Router JF284A H3C MSR 30-20 Router 0235A328 HP MSR30-40 DC Router JF287A H3C MSR 30-40 Router Host (DC) 0235A268 HP MSR30-40 PoE Router JD661A H3C MSR 30-40 POE 0235A25R HP MSR30-40 PoE Router JF803A H3C RT-MSR3040-AC-POE-OVS-H3 0235A323 HP MSR30-40 Router JD657A H3C MSR 30-40 0235A20J HP MSR30-40 Router JF229A H3C RT-MSR3040-AC-OVS-H 0235A299 HP MSR30-40 Router with VCX and 8-port BRI and 4-port FXS Modules JD027A 3Com MSR 3040 VCX CPM 8BRI/4FXS Bundle 3CRBVCXMSR06A HP MSR30-40 Router with VCX and 8-port FXO and 4-port FXS Modules JD026A 3Com MSR 3040 VCX CPM 8FXO/4FXS Bundle 3CRBVCXMSR05A HP MSR30-40 Router with VCX and E1 and 4-port BRI and 4-port FXS Modules JD029A HP A-MSR30-40 Router with VCX and E1 and 4-port BRI and 4-port FXS Modules 3Com MSR 3040 VCX CPM E1/4BRI/4FXS Bundle 3CRBVCXMSR08A HP MSR30-40 Router with VCX and T1 and 4-port FX0 and 4-port FXS Modules JD028A HP A-MSR30-40 Router with VCX and T1 and 4-port FX0 and 4-port FXS Modules 3Com MSR 3040 VCX CPM T1/4FXO/4FXS Bundle 3CRBVCXMSR07A HP MSR30-40 Router with VCX MIM Module JD023A 3Com MSR 3040 VCX Ent MIM Bundle 3CRBVCXMSR01A HP MSR30-60 DC Router JF801A H3C RT-MSR3060-DC-OVS-H3 0235A269 HP MSR30-60 PoE Router JD654A H3C MSR 30-60 POE 0235A25S HP MSR30-60 PoE Router JF804A H3C RT-MSR3060-AC-POE-OVS-H3 0235A296 HP MSR30-60 Router JD658A H3C MSR 30-60 0235A20K HP MSR30-60 Router JF230A H3C RT-MSR3060-AC-OVS-H3 0235A320 HP MSR50-40 DC Router JF285A HP A-MSR50-40 DC Router Chassis H3C MSR5040-DC-OVS-H3C 0235A20P HP MSR50-40 Router JD433A H3C MSR 50-40 Router 0235A297 HP MSR50-60 Router JD656A H3C MSR 50-60 Chassis 0235A20L HP MSR50-60 Router JF231A H3C RT-MSR5060-AC-OVS-H3 0235A298 HP MSR50-60 Router Chassis with DC Power Supply JF640A HP MSR900 2-port FE WAN / 4 -port FE LAN Router JF812A H3C MSR 900 Router, 2 FE WAN, 4 FE LAN, 256DDR 0235A0BX HP MSR900-W Router JF814A H3C MSR 900 Router with 802.11b/g, 2 FE WAN, 4 FE LAN, 256DDR, 802.11b 0235A0C2 HP MSR900-W Router (NA) JG207A HP MSR920 2-port FE WAN / 8-port FE LAN / 802.11b/g Router JF815A H3C MSR 920 Router with 802.11b/g, 2 FE WAN, 8 FE LAN, 256DDR 0235A0C4 HP MSR920 Router JF813A H3C MSR 920 Router, 2 FE WAN, 8 FE LAN, 256DDR 0235A0C0 HP MSR920-W Router (NA) JG208A HP 6040 Router Chassis JD967A 3Com 6040 Router Chassis 3C13840 HP 6080 Router Chassis JD972A 3Com 6080 Router Chassis 3C13880 HP S5600-26C Ethernet Switch JD393A H3C S5600-26C Ethernet Switch 0235A11F HP S5600-26C-PoE Ethernet Switch JD394A H3C S5600-26C-PWR Ethernet Switch 0235A11G HP S5600-26F Ethernet Switch JD395A H3C S5600-26F Ethernet Switch 0235A11H HP S5600-50C Ethernet Switch JD391A H3C S5600-50C Ethernet Switch 0235A11D HP S5600-50C PoE Ethernet Switch JD392A H3C S5600-50C-PWR Ethernet Switch 0235A11E HP S9502 (LS-9502-OVS-H3) Routing Switch Chassis JE551A H3C LS-9502-OVS-H3 0235A21X HP S9505 Routing Switch Chassis JC055A H3C S9505 Routing Switch Chassis 0235A17A HP S9508 Routing Switch Chassis JC054A H3C S9508 Routing Switch Chassis 0235A16T HP S9512 Routing Switch Chassis JC056A H3C S9512 Routing Switch Chassis 0235A17B HP U200-A UTM Appliance JD275A HP A-U200-A Unified Threat Management Appliance H3C SecPath U200-A 0235A36Q HP U200-S UTM Appliance JD273A HP A-U200-S Unified Threat Management Appliance H3C SecPath U200-S 0235A36N HP WX5002 Access Controller JD447A H3C WX5002 Access Controller 0235A34B HP WX5002 Access Controller JD447B HP A-WX5002 Access Controller H3C WX5002 Access Controller 0235A34B HP WX5002 Access Controller JD468A 3Com WX 5002 Access Controller 3CRUWX500275 HP WX5004 Access Controller JD448A HP A-WX5004 Access Controller H3C WX5004 Access Controller 0235A35J HP WX5004 Access Controller JD448B HP A-WX5004 Access Controller H3C WX5004 4-Port 1000BASE-X/1000BASE-T (Combo) Access Controller 0235A0GD HP WX5004 Access Controller JD469A 3Com WX 5004 Access Controller 3CRUWX500475 HP WX6103 Access Controller Support up to 128 Access Points JF247A BACKGROUND CVSS 2.0 Base Metrics =========================================================== Reference Base Vector Base Score CVE-2012-3268 (AV:N/AC:M/Au:N/C:C/I:C/A:C) 9.3 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002 The Hewlett-Packard Company thanks Kurt Grutzmacher (grutz@jingojango.net) and CERT/CC for reporting these vulnerabilities to security-alert@hp.com RESOLUTION If your product is listed as vulnerable, a software update to address this issue may be available for download. Using a web browser, go to http://www.hp.com/networking/support . Enter the product number or product description into Auto Search. Select the displayed result and click ' Display selected '. Click Software Downloads from the list of choices provided below. There is a section called ' Early Availability ' which will contain software that addresses this issue. The descriptive text of the software should indicate SSRT100920 as a further indication that the software addresses this issue. There are important considerations about using Early Availability software: Early Availability software is recommended for use in: Lab testing prior to upgrading a production network Evaluation of new features prior to general deployment Evaluation with specific applications prior to wider deployment Please evaluate this software thoroughly prior to deployment in a production environment. If your product is listed as vulnerable and software is not available via the process outlined previously, you may contact HP Networking support directly by going to this URL: https://h10145.www1.hp.com/help/Help_ContactInfo.aspx?cwp=2&SelectedTab=2 and clicking on your location to get the technical support telephone number. There are other support options such as Electronic Case submission available. If your product is listed as vulnerable and a software update is not yet available, HP is currently working to address these vulnerabilities with a new software update. This Security Bulletin will be revised when the software update is available. Prior to the update being made available and you have an impacted product, the following mitigations are recommended: Moving to SNMPv3 with authentication and privacy for all network management applications. Using SNMPv3s VACM to block access to the H3C-USER-MIB for SNMPv1/v2c users. Here is an example configuration using the snmp-agent command: snmp-agent mib-view include readView iso snmp-agent mib-view exclude readView hh3cUserPassword snmp-agent mib-view include writeView iso snmp-agent mib-view exclude writeView hh3cUserPassword snmp-agent mib-view include notifyView iso snmp-agent group v1 testV1ReadGroup read-view readView snmp-agent usm-user v1 testV1ReadUser testV1ReadGroup snmp-agent group v1 testV1WriteGroup read-view readView write-view writeView notify-view notifyView snmp-agent usm-user v1 testV1WriteUser testV1WriteGroup snmp-agent community read testV1ReadUser mib-view readView snmp-agent community write testV1WriteUser mib-view writeView You may also further control SNMP MIB access using an ACL. For v1/2 snmp-agent community write testV1WriteUser mib-view writeView acl snmp-agent community read testV1ReadUser mib-view readView acl For v3 snmp-agent group v3 testV3Group privacy read-view readView write-view writeView acl snmp-agent usm-user v3 testV3User testV3Group authentication-mode sha privacy-mode aes128 Configure SNMP community strings with ACLs to limit access to SNMP to just network management workstation(s). Here is an example configuration: # acl number 2001 rule 1 permit source 192.168.100.0 0.0.0.255 rule 1 permit source 192.168.100.1 0 acl number 2002 rule 1 permit source 192.168.100.1 0 # snmp-agent community read READONLY acl 2001 snmp-agent community write READONLY acl 2002 # Disable all local user administrative accounts and use RADIUS or TACACS+ authentication instead. Disable SNMP. Regarding secure use of switch or router configuration information: Avoid using plaintext protocols such as TFTP or FTP to transfer configuration files that contain local user accounts. Control user privileges on displaying any configuration information or displaying the content of a configuration file. For example, display current-configuration or more '. HISTORY Version:1 (rev.1) - 22 October 2012 Initial release Version:2 (rev.2) - 25 October 2012 Updated product list and the summary section. Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy. Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HP Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hp.com. Report: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via Email: http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins Security Bulletin List: A list of HP Security Bulletins, updated periodically, is contained in HP Security Notice HPSN-2011-001: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c02964430 Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/ Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB. 3C = 3COM 3P = 3rd Party Software GN = HP General Software HF = HP Hardware and Firmware MP = MPE/iX MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PI = Printing and Imaging PV = ProCurve ST = Storage Software TU = Tru64 UNIX UX = HP-UX Copyright 2012 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlCJl+QACgkQ4B86/C0qfVl9cgCcDoJkIjTWzBdeJdAdOimzRNg7 YJgAoPmQ5ycXX07g21tV9nvSaLLvPPE5 =cmPB -----END PGP SIGNATURE-----