CVE-2002-0250

CVE-2002-0250 describes an authentication bypass vulnerability in the web configuration utility of HP AdvanceStack hubs (J3200A through J3210A) running firmware A.03.07 and earlier. An unauthorized attacker can directly access the web_access.html file via an HTTP request, allowing them to modify the switch's configuration and change the administrator password without authentication. This vulnerability carries a CVSS score of 7.5, indicating high severity. Its attack vector is network-based with low attack complexity and no authentication required, allowing for partial confidentiality, integrity, and availability impact. The FAUCET Risk Score is 91/100, highlighting its significant risk. While not listed on the CISA KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB (EDB-21285). There is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.