[security bulletin] HPSBHF03432 rev.1 - HPE Networking Comware 5, Comware 5 Low Encryption SW, Comware 7, VCX Using NTP, Remote Access Restriction Bypass and Code Execution

From: security-alert@hpe.com
To: bugtraq@securityfocus.com
Cc:
Subject: [security bulletin] HPSBHF03432 rev.1 - HPE Networking Comware 5, Comware 5 Low Encryption SW, Comware 7, VCX Using NTP, Remote Access Restriction Bypass and Code Execution
Date:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Note: the current version of the following document is available here:
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n
a-c04916783

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04916783
Version: 1

HPSBHF03432 rev.1 - HPE Networking Comware 5, Comware 5 Low Encryption SW,
Comware 7, VCX Using NTP, Remote Access Restriction Bypass and Code Execution

NOTICE: The information in this Security Bulletin should be acted upon as
soon as possible.

Release Date: 2015-12-09
Last Updated: 2015-12-09

Potential Security Impact: Remote Access Restriction Bypass, Code Execution

Source: Hewlett Packard Enterprise, Product Security Response Team

VULNERABILITY SUMMARY
Potential security vulnerabilities have been identified with HPE Networking
Comware 5, Comware 5, Low Encryption SW, Comware 7, and VCX, Using NTP. The
vulnerabilities could be remotely exploited resulting in resulting in remote
access restriction bypass and code execution.

References:

SSRT101878
CVE-2014-9293
CVE-2014-9294
CVE-2014-9295

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

See the RESOLUTION
 section for a list of impacted hardware and Comware 5, Comware 5 Low
Encryption SW, Comware 7, and VCX versions.

BACKGROUND

CVSS 2.0 Base Metrics
===========================================================
  Reference              Base Vector             Base Score
CVE-2014-9293    (AV:N/AC:L/Au:N/C:P/I:P/A:P)       7.5
CVE-2014-9294    (AV:N/AC:L/Au:N/C:P/I:P/A:P)       7.5
CVE-2014-9295    (AV:N/AC:L/Au:N/C:P/I:P/A:P)       7.5
===========================================================
             Information on CVSS is documented
            in HP Customer Notice: HPSN-2008-002

RESOLUTION
Hewlett Packard Enterprise has provided updated Comware 5, Comware 5 Low
Encryption SW, Comware 7 and VCX to address this on Impacted Hewlett Packard
Enterprise products. Family
 Fixed Version
 HP Branded Products Impacted
 H3C Branded Products Impacted
 CVE #

8800 (Comware 5)
 R3627P04
 JC137A HP 8805/8808/8812 (2E) Main Control Unit Module, JC138A HP
8805/8808/8812 (1E) Main Control Unit Module, JC141A HP 8802 Main Control
Unit Module, JC147A HP 8802 Router Chassis, JC147B HP 8802 Router Chassis,
JC148A HP 8805 Router Chassis, JC148B HP 8805 Router Chassis, JC149A HP 8808
Router Chassis, JC149B HP 8808 Router Chassis, JC150A HP 8812 Router Chassis,
JC150B HP 8812 Router Chassis, JC596A HP 8800 Dual Fabric Main Processing
Unit, JC597A HP 8800 Single Fabric Main Processing Unit

 CVE-2014-9295

A6600 (Comware 5)
 R3303P18
 JC165A HP 6600 RPE-X1 Router Module, JC177A HP 6608 Router, JC177B HP 6608
Router Chassis, JC178A HP 6604 Router Chassis, JC178B HP 6604 Router Chassis,
JC496A HP 6616 Router Chassis, JC566A HP 6600 RSE-X1 Router Main Processing
Unit, JG780A HP 6600 RSE-X1 TAA-compliant Main Processing Unit, JG781A HP
6600 RPE-X1 TAA-compliant Main Processing Unit

 CVE-2014-9295

HSR6602 (Comware 5)
 R3303P18
 JC176A HP 6602 Router Chassis, JG353A HP HSR6602-G Router, JG354A HP
HSR6602-XG Router, JG355A HP 6600 MCP-X1 Router Main Processing Unit, JG356A
HP 6600 MCP-X2 Router Main Processing Unit, JG776A HP HSR6602-G TAA-compliant
Router, JG777A HP HSR6602-XG TAA-compliant Router, JG778A HP 6600 MCP-X2
Router TAA-compliant Main Processing Unit

 CVE-2014-9295

HSR6800 (Comware 5)
 R3303P18
 JG361A HP HSR6802 Router Chassis, JG362A HP HSR6804 Router Chassis, JG363A
HP HSR6808 Router Chassis, JG364A HP HSR6800 RSE-X2 Router Main Processing
Unit, JG779A HP HSR6800 RSE-X2 Router TAA-compliant Main Processing Unit

 CVE-2014-9295

MSR20 (Comware 5)
 R2513P45
 JD432A HP A-MSR20-21 Router, JD662A HP MSR20-20 Router, JD663A HP A-MSR20-21
Router, JD663B HP MSR20-21 Router, JD664A HP MSR20-40 Router, JF228A HP
MSR20-40 Router, JF283A HP MSR20-20 Router

 CVE-2014-9295

MSR20-1X (Comware 5)
 R2513P45
 JD431A HP MSR20-10 Router, JD667A HP MSR20-15 IW Multi-Service Router,
JD668A HP MSR20-13 Multi-Service Router, JD669A HP MSR20-13 W Multi-Service
Router, JD670A HP MSR20-15 A Multi-Service Router, JD671A HP MSR20-15 AW
Multi-Service Router, JD672A HP MSR20-15 I Multi-Service Router, JD673A HP
MSR20-11 Multi-Service Router, JD674A HP MSR20-12 Multi-Service Router,
JD675A HP MSR20-12 W Multi-Service Router, JD676A HP MSR20-12 T1
Multi-Service Router, JF236A HP MSR20-15-I Router, JF237A HP MSR20-15-A
Router, JF238A HP MSR20-15-I-W Router, JF239A HP MSR20-11 Router, JF240A HP
MSR20-13 Router, JF241A HP MSR20-12 Router, JF806A HP MSR20-12-T Router,
JF807A HP MSR20-12-W Router, JF808A HP MSR20-13-W Router, JF809A HP
MSR20-15-A-W Router, JF817A HP MSR20-15 Router, JG209A HP MSR20-12-T-W Router
(NA), JG210A HP MSR20-13-W Router (NA)
 H3C MSR 20-15 Router Host(AC) 1 FE 4 LSW 1, H3C RT-MSR2015-AC-OVS-AW-H3
(0235A393), H3C RT-MSR2015-AC-OVS-I-H3 (0235A394), H3C
RT-MSR2015-AC-OVS-IW-H3 (0235A38V), H3C MSR 20-11 (0235A31V), H3C MSR 20-12
(0235A32E), H3C MSR 20-12 T1 (0235A32B), H3C MSR 20-13 (0235A31W), H3C MSR
20-13 W (0235A31X), H3C MSR 20-15 A (0235A31Q), H3C MSR 20-15 A W (0235A31R),
H3C MSR 20-15 I (0235A31N), H3C MSR 20-15 IW (0235A31P), H3C MSR20-12 W
(0235A32G)
 CVE-2014-9295

MSR 30 (Comware 5)
 R2513P45
 JD654A HP MSR30-60 POE Multi-Service Router, JD657A HP MSR30-40
Multi-Service Router, JD658A HP MSR30-60 Multi-Service Router, JD660A HP
MSR30-20 POE Multi-Service Router, JD661A HP MSR30-40 POE Multi-Service
Router, JD666A HP MSR30-20 Multi-Service Router, JF229A HP MSR30-40 Router,
JF230A HP MSR30-60 Router, JF232A HP RTMSR3040-AC-OVSAS-H3, JF235A HP
MSR30-20 DC Router, JF284A HP MSR30-20 Router, JF287A HP MSR30-40 DC Router,
JF801A HP MSR30-60 DC Router, JF802A HP MSR30-20 PoE Router, JF803A HP
MSR30-40 PoE Router, JF804A HP MSR30-60 PoE Router
 H3C MSR 30-20 Router (0235A328), H3C MSR 30-40 Router Host(DC) (0235A268),
H3C RT-MSR3020-AC-POE-OVS-H3 (0235A322), H3C RT-MSR3020-DC-OVS-H3 (0235A267),
H3C RT-MSR3040-AC-OVS-H (0235A299), H3C RT-MSR3040-AC-POE-OVS-H3 (0235A323),
H3C RT-MSR3060-AC-OVS-H3 (0235A320), H3C RT-MSR3060-AC-POE-OVS-H3 (0235A296),
H3C RT-MSR3060-DC-OVS-H3 (0235A269), H3C MSR 30-20 RTVZ33020AS Router
Host(AC) (0235A20S), H3C MSR 30-20 (0235A19L), H3C MSR 30-20 POE (0235A239),
H3C MSR 30-40 (0235A20J), H3C MSR 30-40 POE (0235A25R), H3C MSR 30-60
(0235A20K), H3C MSR 30-60 POE (0235A25S), H3C RT-MSR3040-AC-OVS-AS-H3
(0235A20V)
 CVE-2014-9295

MSR 30-16 (Comware 5)
 R2513P45
 JD659A HP MSR30-16 POE Multi-Service Router, JD665A HP MSR30-16
Multi-Service Router, JF233A HP MSR30-16 Router, JF234A HP MSR30-16 PoE
Router,
 H3C RT-MSR3016-AC-OVS-H3 (0235A327), H3C RT-MSR3016-AC-POE-OVS-H3
(0235A321), H3C MSR 30-16 (0235A237), H3C MSR 30-16 POE (0235A238)
 CVE-2014-9295

MSR 30-1X (Comware 5)
 R2513P45
 JF800A HP MSR30-11 Router, JF816A HP MSR30-10 2 FE /2 SIC /1 MIM MS Rtr,
JG182A HP MSR30-11E Router, JG183A HP MSR30-11F Router, JG184A HP MSR30-10 DC
Router
 2FE 2SIC 1XMIM 256DDR (0235A39H), H3C RT-MSR3011-AC-OVS-H3 (0235A29L)
 CVE-2014-9295

MSR 50 (Comware 5)
 R2513P45
 JD433A HP MSR50-40 Router, JD653A HP MSR50 Processor Module, JD655A HP
MSR50-40 Multi-Service Router, JD656A HP MSR50-60 Multi-Service Router,
JF231A HP MSR50-60 Router, JF285A HP MSR50-40 DC Router, JF640A HP MSR50-60
Rtr Chassis w DC PwrSupply
 H3C MSR 50-40 Router (0235A297), H3C MSR5040-DCOVS-H3C (0235A20P), H3C
RT-MSR5060-AC-OVS-H3 (0235A298), H3C MSR 50-40 Chassis (0235A20N), H3C MSR
50-60 Chassis (0235A20L)
 CVE-2014-9295

MSR 50-G2 (Comware 5)
 R2513P45
 JD429A HP MSR50 G2 Processor Module, JD429B HP MSR50 G2 Processor Module
 H3C H3C MSR 50 Processor Module-G2 (0231A84Q), H3C MSR 50 High Performance
Main Processing Unit 3GE (Combo) 256F/1GD (0231A0KL)
 CVE-2014-9295

MSR 9XX (Comware 5)
 R2513P45
 JF812A HP MSR900 Router, JF813A HP MSR920 Router, JF814A HP MSR900-W Router,
JF815A HP MSR920 2FEWAN/8FELAN/.11 b/g Rtr, JG207A HP MSR900-W Router (NA),
JG208A HP MSR920-W Router (NA)
 H3C MSR 900 Router with 802.11b/g 2 FE WAN 4 FE LAN 256DDR 802.11b
(0235A0C2), H3C MSR 900 Router 2 FE WAN 4 FE LAN 256DDR (0235A0BX), H3C MSR
920 Router with 802.11b/g 2 FE WAN 8 FE LAN 256DDR (0235A0C4), H3C MSR 920
Router 2 FE WAN 8 FE LAN 256DDR (0235A0C0)
 CVE-2014-9295

MSR 93X (Comware 5)
 R2513P45
 JG512A HP MSR930 Wireless Router, JG513A HP MSR930 3G Router, JG514A HP
MSR931 Router, JG515A HP MSR931 3G Router, JG516A HP MSR933 Router, JG517A HP
MSR933 3G Router, JG518A HP MSR935 Router, JG519A HP MSR935 Wireless Router,
JG520A HP MSR935 3G Router, JG531A HP MSR931 Dual 3G Router, JG596A HP MSR930
4G LTE/3G CDMA Router, JG597A HP MSR936 Wireless Router, JG665A HP MSR930 4G
LTE/3G WCDMA Global Router, JG704A HP MSR930 4G LTE/3G WCDMA ATT Router
 N/A
 CVE-2014-9295

MSR1000 (Comware 5)
 R2513P45
 JG732A HP MSR1003-8 AC Router
 N/A
 CVE-2014-9295

MSR20 (Comware 5 - Low Encryption SW)
 R2513L61
 JD663B HP MSR20-21 Router, JF228A HP MSR20-40 Router, JF283A HP MSR20-20
Router
 H3C RT-MSR2020-AC-OVS-H3C (0235A324), H3C RT-MSR2040-AC-OVS-H3 (0235A326)
 CVE-2014-9295

MSR20-1X (Comware 5 - Low Encryption SW)
 R2513L61
 JD431A HP MSR20-10 Router, JF236A HP MSR20-15-I Router, JF237A HP MSR20-15-A
Router, JF238A HP MSR20-15-I-W Router, JF239A HP MSR20-11 Router, JF240A HP
MSR20-13 Router, JF241A HP MSR20-12 Router, JF806A HP MSR20-12-T Router,
JF807A HP MSR20-12-W Router, JF808A HP MSR20-13-W Router, JF809A HP
MSR20-15-A-W Router, JF817A HP MSR20-15 Router
 H3C MSR 20-10 (0235A0A7), H3C RT-MSR2015-AC-OVS-I-H3 (0235A394), H3C
RT-MSR2015-AC-OVS-A-H3 (0235A392), H3C RT-MSR2015-AC-OVS-AW-H3 (0235A393),
H3C RT-MSR2011-AC-OVS-H3 (0235A395), H3C RT-MSR2013-AC-OVS-H3 (0235A390), H3C
RT-MSR2012-AC-OVS-H3 (0235A396), H3C RT-MSR2012-TAC-OVS-H3 (0235A398), H3C
RT-MSR2012-AC-OVS-W-H3 (0235A397), H3C RT-MSR2013-AC-OVS-W-H3 (0235A391), H3C
RT-MSR2015-AC-OVS-IW-H3 (0235A38V), H3C MSR 20-15 Router Host(AC) 1 FE 4 LSW
1 ADSLoPOTS 1 DSIC (0235A0A8)
 CVE-2014-9295

MSR30 (Comware 5 - Low Encryption SW)
 R2513L61
 JF229A HP MSR30-40 Router, JF230A HP MSR30-60 Router, JF235A HP MSR30-20 DC
Router, JF284A HP MSR30-20 Router, JF287A HP MSR30-40 DC Router, JF801A HP
MSR30-60 DC Router, JF802A HP MSR30-20 PoE Router, JF803A HP MSR30-40 PoE
Router, JF804A HP MSR30-60 PoE Router
 H3C RT-MSR3040-AC-OVS-H (0235A299), H3C RT-MSR3060-AC-OVS-H3 (0235A320), H3C
RT-MSR3020-DC-OVS-H3 (0235A267), H3C MSR 30-20 Router (0235A328), H3C MSR
30-40 Router Host(DC) (0235A268), H3C RT-MSR3060-DC-OVS-H3 (0235A269), H3C
RT-MSR3020-AC-POE-OVS-H3 (0235A322), H3C RT-MSR3040-AC-POE-OVS-H3 (0235A323),
H3C RT-MSR3060-AC-POE-OVS-H3 (0235A296)
 CVE-2014-9295

MSR30-16 (Comware 5 - Low Encryption SW)
 R2513L61
 JF233A HP MSR30-16 Router, JF234A HP MSR30-16 PoE Router
 H3C RT-MSR3016-AC-OVS-H3 (0235A327), H3C RT-MSR3016-AC-POE-OVS-H3 (0235A321)
 CVE-2014-9295

MSR30-1X (Comware 5 - Low Encryption SW)
 R2513L61
 JF800A HP MSR30-11 Router, JF816A HP MSR30-10 2 FE /2 SIC /1 MIM MS Rtr,
JG182A HP MSR30-11E Router, JG183A HP MSR30-11F Router, JG184A HP MSR30-10 DC
Router
 H3C RT-MSR3011-AC-OVS-H3 (0235A29L), H3C MSR 30-10 Router Host(AC) 2FE 2SIC
1XMIM 256DDR (0235A39H)
 CVE-2014-9295

MSR50 (Comware 5 - Low Encryption SW)
 R2513L61
 JD433A HP MSR50-40 Router, JD653A HP MSR50Processor Module, JD655A HP
MSR50-40 Multi-Service Router, JD656A HP MSR50-60 Multi-Service Router,
JF231A HP MSR50-60 Router, JF285A HP MSR50-40 DC Router, JF640A HP MSR50-60
Rtr Chassis w DC PwrSupply
 H3C MSR 50-40 Router (0235A297), H3C MSR 50 Processor Module (0231A791), H3C
MSR 50-40 Chassis (0235A20N), H3C MSR 50-60 Chassis (0235A20L), H3C
RT-MSR5060-AC-OVS-H3 (0235A298), H3C MSR5040-DCOVS-H3C (0235A20P)
 CVE-2014-9295

MSR50 G2 (Comware 5 - Low Encryption SW)
 R2513L61
 JD429B HP MSR50 G2 Processor Module
 H3C MSR 50 High Performance Main Processing Unit 3GE (Combo) 256F/1GD
(0231A0KL)
 CVE-2014-9295

12500 (Comware 5)
 R1828P06
 JC085A HP A12518 Switch Chassis, JC086A HP A12508 Switch Chassis, JC652A HP
12508 DC Switch Chassis, JC653A HP 12518 DC Switch Chassis, JC654A HP 12504
AC Switch Chassis, JC655A HP 12504 DC Switch Chassis, JF430A HP A12518 Switch
Chassis, JF430B HP 12518 Switch Chassis, JF430C HP 12518 AC Switch Chassis,
JF431A HP A12508 Switch Chassis, JF431B HP 12508 Switch Chassis, JF431C HP
12508 AC Switch Chassis, JC072B HP 12500 Main Processing Unit, JC808A HP
12500 TAA Main Processing Unit
 H3C S12508 Routing Switch (AC-1) (0235A0GE), H3C S12518 Routing Switch
(AC-1) (0235A0GF), H3C S12508 Chassis (0235A0E6), H3C S12508 Chassis
(0235A38N), H3C S12518 Chassis (0235A0E7), H3C S12518 Chassis (0235A38M), H3C
12508 DC Switch Chassis (0235A38L), H3C 12518 DC Switch Chassis (0235A38K)
 CVE-2014-9295

9500E (Comware 5)
 R1828P06
 JC124A HP A9508 Switch Chassis, JC124B HP 9505 Switch Chassis, JC125A HP
A9512 Switch Chassis, JC125B HP 9512 Switch Chassis, JC474A HP A9508-V Switch
Chassis, JC474B HP 9508-V Switch Chassis
 H3C S9505E Routing-Switch Chassis (0235A0G6), H3C S9512E Routing-Switch
Chassis (0235A0G7), H3C S9508E-V Routing-Switch Chassis (0235A38Q), H3C
S9505E Chassis w/ Fans (0235A38P), H3C S9512E Chassis w/ Fans (0235A38R)
 CVE-2014-9295

10500 (Comware 5)
 R1208P10
 JC611A HP 10508-V Switch Chassis, JC612A HP 10508 Switch Chassis, JC613A HP
10504 Switch Chassis, JC614A HP 10500 Main Processing Unit, JC748A HP 10512
Switch Chassis, JG375A HP 10500 TAA-compliant Main Processing Unit, JG820A HP
10504 TAA-compliant Switch Chassis, JG821A HP 10508 TAA-compliant Switch
Chassis, JG822A HP 10508-V TAA-compliant Switch Chassis, JG823A HP 10512
TAA-compliant Switch Chassis

 CVE-2014-9295

7500 (Comware 5)
 R6708P10
 JC666A HP 7503-S 144Gbps Fabric/MPU with PoE Upgradable 20-port Gig-T/4-port
GbE Combo, JC697A HP 7502 TAA-compliant Main Processing Unit, JC698A HP
7503-S 144Gbps TAA Fabric / MPU with 16 GbE SFP Ports and 8 GbE Combo Ports,
JC699A HP 7500 384Gbps TAA-compliant Fabric / MPU with 2 10GbE XFP Ports,
JC700A HP 7500 384Gbps TAA-compliant Fabric / Main Processing Unit, JC701A HP
7500 768Gbps TAA-compliant Fabric / Main Processing Unit, JD193A HP 7500
384Gbps Fabric Module with 2 XFP Ports, JD193B HP 7500 384Gbps Fabric Module
with 2 XFP Ports, JD194A HP 7500 384Gbps Fabric Module, JD194B HP 7500
384Gbps Fabric Module, JD195A HP 7500 384Gbps Advanced Fabric Module, JD196A
HP 7502 Fabric Module, JD220A HP 7500 768Gbps Fabric Module, JD224A HP 7500
384Gbps Fabric Module with 12 SFP Ports, JD238A HP 7510 Switch Chassis,
JD238B HP 7510 Switch Chassis, JD239A HP 7506 Switch Chassis, JD239B HP 7506
Switch Chassis, JD240A HP 7503 Switch Chassis, JD240B HP 7503 Switch Chassis,
JD241A HP 7506-V Switch Chassis, JD241B HP 7506-V Switch Chassis, JD242A HP
7502 Switch Chassis, JD242B HP 7502 Switch Chassis, JD243A HP 7503-S Switch
Chassis with 1 Fabric Slot, JD243B HP 7503-S Switch Chassis with 1 Fabric
Slot, JE164A HP E7902 Switch Chassis, JE165A HP E7903 Switch Chassis, JE166A
HP E7903 1 Fabric Slot Switch Chassis, JE167A HP E7906 Switch Chassis, JE168A
HP E7906 Vertical Switch Chassis, JE169A HP E7910 Switch Chassis

 CVE-2014-9295

5830 (Comware 5)
 R1118P11
 JC691A HP 5830AF-48G Switch with 1 Interface Slot, JC694A HP 5830AF-96G
Switch, JG316A HP 5830AF-48G TAA-compliant Switch w/1 Interface Slot, JG374A
HP 5830AF-96G TAA-compliant Switch

 CVE-2014-9295

5800 (Comware 5)
 R1809P03
 JC099A HP 5800-24G-PoE Switch, JC099B HP 5800-24G-PoE+ Switch, JC100A HP
5800-24G Switch, JC100B HP 5800-24G Switch, JC101A HP 5800-48G Switch with 2
Slots, JC101B HP 5800-48G-PoE+ Switch with 2 Interface Slots, JC103A HP
5800-24G-SFP Switch, JC103B HP 5800-24G-SFP Switch with 1 Interface Slot,
JC104A HP 5800-48G-PoE Switch, JC104B HP 5800-48G-PoE+ Switch with 1
Interface Slot, JC105A HP 5800-48G Switch, JC105B HP 5800-48G Switch with 1
Interface Slot, JG254A HP 5800-24G-PoE+ TAA-compliant Switch, JG254B HP
5800-24G-PoE+ TAA-compliant Switch, JG255A HP 5800-24G TAA-compliant Switch,
JG255B HP 5800-24G TAA-compliant Switch, JG256A HP 5800-24G-SFP TAA-compliant
Switch with 1 Interface Slot, JG256B HP 5800-24G-SFP TAA-compliant Switch
with 1 Interface Slot, JG257A HP 5800-48G-PoE+ TAA-compliant Switch with 1
Interface Slot, JG257B HP 5800-48G-PoE+ TAA-compliant Switch with 1 Interface
Slot, JG258A HP 5800-48G TAA-compliant Switch with 1 Interface Slot, JG258B
HP 5800-48G TAA-compliant Switch with 1 Interface Slot, JG225A HP 5800AF-48G
Switch, JG225B HP 5800AF-48G Switch, JG242A HP 5800-48G-PoE+ TAA-compliant
Switch with 2 Interface Slots, JG242B HP 5800-48G-PoE+ TAA-compliant Switch
with 2 Interface

 CVE-2014-9295

5820 (Comware 5)
 R1809P03
 JG243A HP 5820-24XG-SFP+ TAA-compliant Switch, JG243B HP 5820-24XG-SFP+
TAA-compliant Switch, JG259A HP 5820X-14XG-SFP+ TAA-compliant Switch with 2
Interface Slots & 1 OAA Slot, JG259B HP 5820-14XG-SFP+ TAA-compliant Switch
with 2 Interface Slots and 1 OAA Slot, JC106A HP 5820-14XG-SFP+ Switch with 2
Slots, JC106B HP 5820-14XG-SFP+ Switch with 2 Interface Slots & 1 OAA Slot,
JG219A HP 5820AF-24XG Switch, JG219B HP 5820AF-24XG Switch, JC102A HP
5820-24XG-SFP+ Switch, JC102B HP 5820-24XG-SFP+ Switch

 CVE-2014-9295

5500 HI (Comware 5)
 R5501P06
 JG311A HP 5500-24G-4SFP HI Switch with 2 Interface Slots, JG312A HP
5500-48G-4SFP HI Switch with 2 Interface Slots, JG541A HP 5500-24G-PoE+-4SFP
HI Switch with 2 Interface Slots, JG542A HP 5500-48G-PoE+-4SFP HI Switch with
2 Interface Slots, JG543A HP 5500-24G-SFP HI Switch with 2 Interface Slots,
JG679A HP 5500-24G-PoE+-4SFP HI TAA-compliant Switch with 2 Interface Slots,
JG680A HP 5500-48G-PoE+-4SFP HI TAA-compliant Switch with 2 Interface Slots,
JG681A HP 5500-24G-SFP HI TAA-compliant Switch with 2 Interface Slots

 CVE-2014-9295

5500 EI (Comware 5)
 R2221P08
 JD373A HP 5500-24G DC EI Switch, JD374A HP 5500-24G-SFP EI Switch, JD375A HP
5500-48G EI Switch, JD376A HP 5500-48G-PoE EI Switch, JD377A HP 5500-24G EI
Switch, JD378A HP 5500-24G-PoE EI Switch, JD379A HP 5500-24G-SFP DC EI
Switch, JG240A HP 5500-48G-PoE+ EI Switch with 2 Interface Slots, JG241A HP
5500-24G-PoE+ EI Switch with 2 Interface Slots, JG249A HP 5500-24G-SFP EI
TAA-compliant Switch with 2 Interface, JG250A HP 5500-24G EI TAA-compliant
Switch with 2 Interface Slots, JG251A HP 5500-48G EI TAA-compliant Switch
with 2 Interface Slots, JG252A HP 5500-24G-PoE+ EI TAA-compliant Switch with
2 Interface Slots, JG253A HP 5500-48G-PoE+ EI TAA-compliant Switch with 2
Interface Slots

 CVE-2014-9295

4800G (Comware 5)
 R2221P08
 JD007A HP 4800-24G Switch, JD008A HP 4800-24G-PoE Switch, JD009A HP
4800-24G-SFP Switch, JD010A HP 4800-48G Switch, JD011A HP 4800-48G-PoE Switch

 CVE-2014-9295

5500SI (Comware 5)
 R2221P08
 JD369A HP 5500-24G SI Switch, JD370A HP 5500-48G SI Switch, JD371A HP
5500-24G-PoE SI Switch, JD372A HP 5500-48G-PoE SI Switch, JG238A HP
5500-24G-PoE+ SI Switch with 2 Interface Slots, JG239A HP 5500-48G-PoE+ SI
Switch with 2 Interface Slots

 CVE-2014-9295

4500G (Comware 5)
 R2221P08
 JF428A HP 4510-48G Switch, JF847A HP 4510-24G Switch

 CVE-2014-9295

5120 EI (Comware 5)
 R2221P08
 JE066A HP 5120-24G EI Switch, JE067A HP 5120-48G EI Switch, JE068A HP
5120-24G EI Switch with 2 Interface Slots, JE069A HP 5120-48G EI Switch with
2 Interface Slots, JE070A HP 5120-24G-PoE EI 2-slot Switch, JE071A HP
5120-48G-PoE EI 2-slot Switch, JG236A HP 5120-24G-PoE+ EI Switch with 2
Interface Slots, JG237A HP 5120-48G-PoE+ EI Switch with 2 Interface Slots,
JG245A HP 5120-24G EI TAA-compliant Switch with 2 Interface Slots, JG246A HP
5120-48G EI TAA-compliant Switch with 2 Interface Slots, JG247A HP
5120-24G-PoE+ EI TAA-compliant Switch with 2 Slots, JG248A HP 5120-48G-PoE+
EI TAA-compliant Switch with 2 Slots

 CVE-2014-9295

4210G (Comware 5)
 R2221P08
 JF844A HP 4210-24G Switch, JF845A HP 4210-48G Switch, JF846A HP 4210-24G-PoE
Switch

 CVE-2014-9295

5120 SI (Comware 5)
 R1513P95
 JE072A HP 5120-48G SI Switch, JE073A HP 5120-16G SI Switch, JE074A HP
5120-24G SI Switch, JG091A HP 5120-24G-PoE+ (370W) SI Switch, JG092A HP
5120-24G-PoE+ (170W) SI Switch

 CVE-2014-9295

3610 (Comware 5)
 R5319P10
 JD335A HP 3610-48 Switch, JD336A HP 3610-24-4G-SFP Switch, JD337A HP
3610-24-2G-2G-SFP Switch, JD338A HP 3610-24-SFP Switch

 CVE-2014-9295

3600V2 (Comware 5)
 R2110P03
 JG299A HP 3600-24 v2 EI Switch, JG299B HP 3600-24 v2 EI Switch, JG300A HP
3600-48 v2 EI Switch, JG300B HP 3600-48 v2 EI Switch, JG301A HP 3600-24-PoE+
v2 EI Switch, JG301B HP 3600-24-PoE+ v2 EI Switch, JG301C HP 3600-24-PoE+ v2
EI Switch, JG302A HP 3600-48-PoE+ v2 EI Switch, JG302B HP 3600-48-PoE+ v2 EI
Switch, JG302C HP 3600-48-PoE+ v2 EI Switch, JG303A HP 3600-24-SFP v2 EI
Switch, JG303B HP 3600-24-SFP v2 EI Switch, JG304A HP 3600-24 v2 SI Switch,
JG304B HP 3600-24 v2 SI Switch, JG305A HP 3600-48 v2 SI Switch, JG305B HP
3600-48 v2 SI Switch, JG306A HP 3600-24-PoE+ v2 SI Switch, JG306B HP
3600-24-PoE+ v2 SI Switch, JG306C HP 3600-24-PoE+ v2 SI Switch, JG307A HP
3600-48-PoE+ v2 SI Switch, JG307B HP 3600-48-PoE+ v2 SI Switch, JG307C HP
3600-48-PoE+ v2 SI Switch

 CVE-2014-9295

3100V2-48 (Comware 5)
 R2110P03
 JG315A HP 3100-48 v2 Switch, JG315B HP 3100-48 v2 Switch

 CVE-2014-9295

3100V2 (Comware 5)
 R5203P11
 JD313B HP 3100-24-PoE v2 EI Switch, JD318B HP 3100-8 v2 EI Switch, JD319B HP
3100-16 v2 EI Switch, JD320B HP 3100-24 v2 EI Switch, JG221A HP 3100-8 v2 SI
Switch, JG222A HP 3100-16 v2 SI Switch, JG223A HP 3100-24 v2 SI Switch

 CVE-2014-9295

HP870 (Comware 5)
 R2607P35
 JG723A HP 870 Unified Wired-WLAN Appliance, JG725A HP 870 Unified Wired-WLAN
TAA-compliant Appliance

 CVE-2014-9295

HP850 (Comware 5)
 R2607P35
 JG722A HP 850 Unified Wired-WLAN Appliance, JG724A HP 850 Unified Wired-WLAN
TAA-compliant Appliance

 CVE-2014-9295

HP830 (Comware 5)
 R3507P35
 JG640A HP 830 24-Port PoE+ Unified Wired-WLAN Switch, JG641A HP 830 8-port
PoE+ Unified Wired-WLAN Switch, JG646A HP 830 24-Port PoE+ Unified Wired-WLAN
TAA-compliant Switch, JG647A HP 830 8-Port PoE+ Unified Wired-WLAN
TAA-compliant

 CVE-2014-9295

HP6000 (Comware 5)
 R2507P35
 JG639A HP 10500/7500 20G Unified Wired-WLAN Module, JG645A HP 10500/7500 20G
Unified Wired-WLAN TAA-compliant Module

 CVE-2014-9295

WX5004-EI (Comware 5)
 R2507P35
 JD447B HP WX5002 Access Controller, JD448A HP WX5004 Access Controller,
JD448B HP WX5004 Access Controller, JD469A HP WX5004 Access Controller

 CVE-2014-9295

SecBlade FW (Comware 5)
 R3181P05
 JC635A HP 12500 VPN Firewall Module, JD245A HP 9500 VPN Firewall Module,
JD249A HP 10500/7500 Advanced VPN Firewall Module, JD250A HP 6600 Firewall
Processing Router Module, JD251A HP 8800 Firewall Processing Module, JD255A
HP 5820 VPN Firewall Module

 CVE-2014-9295

F1000-E (Comware 5)
 R3181P05
 JD272A HP F1000-E VPN Firewall Appliance

 CVE-2014-9295

F1000-A-EI (Comware 5)
 R3734P06
 JG214A HP F1000-A-EI VPN Firewall Appliance

 CVE-2014-9295

F1000-S-EI (Comware 5)
 R3734P06
 JG213A HP F1000-S-EI VPN Firewall Appliance

 CVE-2014-9295

F5000-A (Comware 5)
 F3210P23
 JD259A HP A5000-A5 VPN Firewall Chassis, JG215A HP F5000 Firewall Main
Processing Unit, JG216A HP F5000 Firewall Standalone Chassis

 CVE-2014-9295

U200S and CS (Comware 5)
 F5123P31
 JD273A HP U200-S UTM Appliance

 CVE-2014-9295

U200A and M (Comware 5)
 F5123P31
 JD275A HP U200-A UTM Appliance

 CVE-2014-9295

F5000-C/S (Comware 5)
 R3811P03
 JG650A HP F5000-C VPN Firewall Appliance, JG370A HP F5000-S VPN Firewall
Appliance

 CVE-2014-9295

SecBlade III (Comware 5)
 R3820P03
 JG371A HP 12500 20Gbps VPN Firewall Module, JG372A HP 10500/11900/7500
20Gbps VPN Firewall Module

 CVE-2014-9295

MSR20 RU (Comware 5 Low Encryption SW)
 R2513L61
 JD432A HP A-MSR20-21 Router, JD662A HP MSR20-20 Router, JD663A HP A-MSR20-21
Router, JD663B HP MSR20-21 Router, JD664A HP MSR20-40 Router, JF228A HP
MSR20-40, JF283A HP MSR20-20 Router

 CVE-2014-9295

MSR20-1X RU (Comware 5 Low Encryption SW)
 R2513L61
 JD431A HP MSR20-10 Router, JD667A HP A-MSR20-15 IW Multi-service Router,
JD668A HP MSR20-13 Router, JD669A HP MSR20-13-W Router, JD670A HP A-MSR20-15
A Multi-service Router, JD671A HP A-MSR20-15 AW Multi-service Router, JD672A
HP A-MSR20-15 I Multi-service Router, JD673A HP MSR20-11 Router, JD674A HP
MSR20-12 Router, JD675A HP MSR20-12-W Router, JD676A HP MSR20-12-T Router,
JF236A HP MSR20-15-I Router, JF237A HP MSR20-15-A Router, JF238A HP
MSR20-15-I-W Router, JF239A HP MSR20-11 Router, JF240A HP MSR20-13 Router,
JF241A HP MSR20-12 Router, JF806A HP MSR20-12-T Router, JF807A HP MSR20-12-W
Router, JF808A HP MSR20-13-W Router, JF809A HP MSR20-15-A-W Router, JF817A HP
MSR20-15 Router, JG209A HP MSR20-12-T-W Router, JG210A HP MSR20-13-W Router

 CVE-2014-9295

MSR30 RU (Comware 5 Low Encryption SW)
 R2513L61
 JD654A HP MSR30-60 PoE Router, JD657A HP MSR30-40 Router, JD658A HP MSR30-60
Router, JD660A HP MSR30-20 PoE Router, JD661A HP MSR30-40 PoE Router, JD666A
HP MSR30-20 Router, JF229A HP MSR30-40 Router, JF230A HP MSR30-60 Router,
JF232A HP A-MSR30-40 (RT-MSR3040-AC-OVS-AS-H3) Multi-service Router, JF235A
HP MSR30-20 DC Router, JF284A HP MSR30-20 Router, JF287A HP MSR30-40 DC
Router, JF801A HP MSR30-60 DC Router, JF802A HP MSR30-20 PoE Router, JF803A
HP MSR30-40 PoE Router, JF804A HP MSR30-60 PoE Router, JG728A HP MSR30-20
TAA-compliant DC Router, JG729A HP MSR30-20 TAA-compliant Router

 CVE-2014-9295

MSR301X RU (Comware 5 Low Encryption SW)
 R2513L61
 JF800A HP MSR30-11 Router, JF816A HP MSR30-10 Router, JG182A HP MSR30-11E
Router, JG183A HP MSR30-11F Router, JG184A HP MSR30-10 DC Router

 CVE-2014-9295

MSR316 RU (Comware 5 Low Encryption SW)
 R2513L61
 JD659A HP MSR30-16 PoE Router, JD665A HP MSR30-16 Router, JF233A HP MSR30-16
Router, JF234A HP MSR30-16 PoE Router

 CVE-2014-9295

MSR50 RU (Comware 5 Low Encryption SW)
 R2513L61
 JD433A HP MSR50-40 Router, JD653A HP MSR50 Processor Module, JD655A HP MSR
50-40 Router, JD656A HP MSR50-60 Router, JF231A HP MSR50-60 Router, JF285A HP
MSR50-40 DC Router, JF640A HP MSR50-60 Router Chassis with DC Power Supply

 CVE-2014-9295

MSR50 EPU RU (Comware 5 Low Encryption SW)
 R2513L61
 JD429A HP MSR50 G2 Processor Module, JD429B HP MSR50 G2 Processor Module,
JD433A HP MSR50-40 Router, JD655A HP MSR 50-40 Router, JD656A HP MSR50-60
Router, JF231A HP MSR50-60 Router, JF285A HP MSR50-40 DC Router, JF640A HP
MSR50-60 Router Chassis with DC Power Supply

 CVE-2014-9295

MSR1000 RU (Comware 5 Low Encryption SW)
 R2513L61
 JG732A HP MSR1003-8 AC Router

 CVE-2014-9295

6600 RSE RU (Comware 5 Low Encryption SW)
 R3303P18
 JC566A HP 6600 RSE-X1 Router Main Processing Unit, JG780A HP 6600 RSE-X1
TAA-compliant Main Processing Unit

 CVE-2014-9295

6600 RPE RU (Comware 5 Low Encryption SW)
 R3303P18
 JC165A) HP 6600 RPE-X1 Router Module, JG781A) HP 6600 RPE-X1 TAA-compliant
Main Processing Unit

 CVE-2014-9295

6602 RU (Comware 5 Low Encryption SW)
 R3303P18
 JC176A) HP 6602 Router Chassis

 CVE-2014-9295

HSR6602 RU (Comware 5 Low Encryption SW)
 R3303P18
 JC177A HP 6608 Router, JC177B HP 6608 Router Chassis, JC178A HP 6604 Router
Chassis, JC178B HP 6604 Router Chassis, JC496A HP 6616 Router Chassis, JG353A
HP HSR6602-G Router, JG354A HP HSR6602-XG Router, JG355A HP 6600 MCP-X1
Router Main Processing Unit, JG356A HP 6600 MCP-X2 Router Main Processing
Unit, JG776A HP HSR6602-G TAA-compliant Router, JG777A HP HSR6602-XG
TAA-compliant Router, JG778A HP 6600 MCP-X2 Router TAA-compliant Main
Processing Unit

 CVE-2014-9295

HSR6800 RU (Comware 5 Low Encryption SW)
 R3303P18
 JG361A HP HSR6802 Router Chassis, JG362A HP HSR6804 Router Chassis, JG363A
HP HSR6808 Router Chassis, JG364A HP HSR6800 RSE-X2 Router Main Processing
Unit, JG779A HP HSR6800 RSE-X2 Router TAA-compliant Main Processing Unit

 CVE-2014-9295

SMB1910 (Comware 5)
 R1108
 JG540A HP 1910-48 Switch, JG539A HP 1910-24-PoE+ Switch, JG538A HP 1910-24
Switch, JG537A HP 1910-8 -PoE+ Switch, JG536A HP 1910-8 Switch

 CVE-2014-9295

SMB1920 (Comware 5)
 R1106
 JG928A HP 1920-48G-PoE+ (370W) Switch, JG927A HP 1920-48G Switch, JG926A HP
1920-24G-PoE+ (370W) Switch, JG925A HP 1920-24G-PoE+ (180W) Switch, JG924A HP
1920-24G Switch, JG923A HP 1920-16G Switch, JG922A HP 1920-8G-PoE+ (180W)
Switch, JG921A HP 1920-8G-PoE+ (65W) Switch, JG920A HP 1920-8G Switch

 CVE-2014-9295

V1910 (Comware 5)
 R1513P95
 JE005A HP 1910-16G Switch, JE006A HP 1910-24G Switch, JE007A HP 1910-24G-PoE
(365W) Switch, JE008A HP 1910-24G-PoE(170W) Switch, JE009A HP 1910-48G
Switch, JG348A HP 1910-8G Switch, JG349A HP 1910-8G-PoE+ (65W) Switch, JG350A
HP 1910-8G-PoE+ (180W) Switch

 CVE-2014-9295

SMB 1620 (Comware 5)
 R1105
 JG914A HP 1620-48G Switch, JG913A HP 1620-24G Switch, JG912A HP 1620-8G
Switch

 CVE-2014-9295

COMWARE 7 Products

12500 (Comware 7)
 R7328P04
 JC085A HP A12518 Switch Chassis, JC086A HP A12508 Switch Chassis, JC652A HP
12508 DC Switch Chassis, JC653A HP 12518 DC Switch Chassis, JC654A HP 12504
AC Switch Chassis, JC655A HP 12504 DC Switch Chassis, JF430A HP A12518 Switch
Chassis, JF430B HP 12518 Switch Chassis, JF430C HP 12518 AC Switch Chassis,
JF431A HP A12508 Switch Chassis, JF431B HP 12508 Switch Chassis, JF431C HP
12508 AC Switch Chassis, JC072B HP 12500 Main Processing Unit, JG497A HP
12500 MPU w/Comware V7 OS, JG782A HP FF 12508E AC Switch Chassis, JG783A HP
FF 12508E DC Switch Chassis, JG784A HP FF 12518E AC Switch Chassis, JG785A HP
FF 12518E DC Switch Chassis, JG802A HP FF 12500E MPU, JG836A HP FlexFabric
12518E AC Switch TAA-compliant Chassis, JG834A HP FlexFabric 12508E AC Switch
TAA-compliant Chassis, JG835A HP FlexFabric 12508E DC Switch TAA-compliant
Chassis, JG837A HP FlexFabric 12518E DC Switch TAA-compliant Chassis, JG803A
HP FlexFabric 12500E TAA-compliant Main Processing Unit, JG796A HP FlexFabric
12500 48-port 10GbE SFP+ FD Module, JG790A HP FlexFabric 12500 16-port 40GbE
QSFP+ FD Module, JG794A HP FlexFabric 12500 40-port 10GbE SFP+ FG Module,
JG792A HP FlexFabric 12500 40-port 10GbE SFP+ FD Module, JG788A HP FlexFabric
12500 4-port 100GbE CFP FG Module, JG786A HP FlexFabric 12500 4-port 100GbE
CFP FD Module, JG797A HP FlexFabric 12500 48-port 10GbE SFP+ FD TAA-compliant
Module, JG791A HP FlexFabric 12500 16-port 40GbE QSFP+ FD TAA-compliant
Module, JG795A HP FlexFabric 12500 40-port 10GbE SFP+ FG TAA-compliant
Module, JG793A HP FlexFabric 12500 40-port 10GbE SFP+ FD TAA-compliant
Module, JG789A HP FlexFabric 12500 4-port 100GbE CFP FG TAA-compliant Module,
JG787A HP FlexFabric 12500 4-port 100GbE CFP FD TAA-compliant Module, JG798A
HP FlexFabric 12508E Fabric Module
 H3C S12508 Routing Switch (AC-1) (0235A0GE), H3C S12518 Routing Switch
(AC-1) (0235A0GF), H3C S12508 Chassis (0235A0E6), H3C S12508 Chassis
(0235A38N), H3C S12518 Chassis (0235A0E7), H3C S12518 Chassis (0235A38M), H3C
12508 DC Switch Chassis (0235A38L), H3C 12518 DC Switch Chassis (0235A38K)
 CVE-2014-9295

11900 (Comware 7)
 R7169P01
 JG608A HP FF 11908-V Switch Chassis, JG609A HP FF 11900 Main Processing
Unit, JG610A HP FF 11908 1.92Tbps Type D Fabric Module, JG611A HP FF 11900
32p 10GbE SFP+ SF Module, JG612A HP FF 11900 48p 10GbE SFP+ SF Module, JG613A
HP FF 11900 4p 40GbE QSFP+ SF Module, JG614A HP FF 11900 8p 40GbE QSFP+ SF
Module, JG615A HP FF 11900 24-p 1/10GBASE-T SF Module, JG616A HP FF 11900
2500W AC Power Supply, JG617A HP FF 11900 2400W DC Power Supply, JG618A HP FF
11908-V Spare Fan Assy, JG918A HP FF 11900 2p 100GbE CFP SE Module

 CVE-2014-9295

10500 (Comware 7)
 R7150
 JC611A HP 10508-V Switch Chassis, JC612A HP 10508 Switch Chassis, JC613A HP
10504 Switch Chassis, JC748A HP 10512 Switch Chassis, JG820A HP 10504 TAA
Switch Chassis, JG821A HP 10508 TAA Switch Chassis, JG822A HP 10508-V TAA
Switch Chassis, JG823A HP 10512 TAA Switch Chassis, JG496A HP 10500 Type A
MPU w/Comware v7 OS, JH198A HP 10500 Type D Main Processing Unit with Comware
v7 Operating System, JH191A HP 10500 44-port GbE(SFP,LC)/ 4-port 10GbE SFP+
(SFP+,LC) SE Module, JH192A HP 10500 48-port Gig-TRJ45SE Module, JH193A HP
10500 16-port 10GbE SFP+ (SFP+,LC) SF Module, JH194A HP 10500 24-port 10GbE
SFP+ (SFP+,LC) EC Module, JH195A HP 10500 6-port 40GbE QSFP+ EC Module,
JH196A HP 10500 2-port 100GbE CFP EC Module, JH197A HP 10500 48-port 10GbE
SFP+ (SFP+,LC) SG Module
 N/A
 CVE-2014-9295

12900 (Comware 7)
 R1112
 JG619A HP FlexFabric 12910 Switch AC Chassis, JG621A HP FlexFabric 12910
Main Processing Unit, JG632A HP FlexFabric 12916 Switch AC Chassis, JG634A HP
FlexFabric 12916 Main Processing Unit

 CVE-2014-9295

5900 (Comware 7)
 R2311P06
 JC772A HP 5900AF-48XG-4QSFP+ Switch, JG336A HP 5900AF-48XGT-4QSFP+ Switch,
JG510A HP 5900AF-48G-4XG-2QSFP+ Switch, JG554A HP 5900AF-48XG-4QSFP+ TAA
Switch, JG838A HP FF 5900CP-48XG-4QSFP+ Switch, JH036A HP FlexFabric 5900CP
48XG 4QSFP+ TAA-Compliant, JH037A HP 5900AF 48XGT 4QSFP+ TAA-Compliant
Switch, JH038A) HP 5900AF 48G 4XG 2QSFP+ TAA-Compliant

 CVE-2014-9295

5920 (Comware 7)
 R2311P06
 JG296A HP 5920AF-24XG Switch, JG555A HP 5920AF-24XG TAA Switch

 CVE-2014-9295

MSR1000 (Comware 7)
 R0106P31
 JG875A HP MSR1002-4 AC Router, JH060A HP MSR1003-8S AC Router

 CVE-2014-9295

MSR2000 (Comware 7)
 R0106P31
 JG411A HP MSR2003 AC Router, JG734A HP MSR2004-24 AC Router, JG735A) HP
MSR2004-48 Router, JG866A HP MSR2003 TAA-compliant AC Router

 CVE-2014-9295

MSR3000 (Comware 7)
 R0106P31
 JG404A HP MSR3064 Router, JG405A HP MSR3044 Router, JG406A HP MSR3024 AC
Router, JG407A HP MSR3024 DC Router, JG408A HP MSR3024 PoE Router, JG409A HP
MSR3012 AC Router, JG410A HP MSR3012 DC Router, JG861A HP MSR3024
TAA-compliant AC Router

 CVE-2014-9295

MSR4000 (Comware 7)
 R0106P31
 JG402A HP MSR4080 Router Chassis, JG403A HP MSR4060 Router Chassis, JG412A
HP MSR4000 MPU-100 Main Processing Unit, JG869A HP MSR4000 TAA-compliant
MPU-100 Main Processing Unit

 CVE-2014-9295

5800 (Comware 7)
 R7006P12
 JC099A HP 5800-24G-PoE Switch, JC099B HP 5800-24G-PoE+ Switch, JC100A HP
5800-24G Switch, JC100B HP 5800-24G Switch, JC101A HP 5800-48G Switch with 2
Slots, JC101B HP 5800-48G-PoE+ Switch with 2 Interface Slots, JC103A HP
5800-24G-SFP Switch, JC103B HP 5800-24G-SFP Switch with 1 Interface Slot,
JC104A HP 5800-48G-PoE Switch, JC104B HP 5800-48G-PoE+ Switch with 1
Interface Slot, JC105A HP 5800-48G Switch, JC105B HP 5800-48G Switch with 1
Interface Slot, JG254A HP 5800-24G-PoE+ TAA-compliant Switch, JG254B HP
5800-24G-PoE+ TAA-compliant Switch, JG255A HP 5800-24G TAA-compliant Switch,
JG255B HP 5800-24G TAA-compliant Switch, JG256A HP 5800-24G-SFP TAA-compliant
Switch with 1 Interface Slot, JG256B HP 5800-24G-SFP TAA-compliant Switch
with 1 Interface Slot, JG257A HP 5800-48G-PoE+ TAA-compliant Switch with 1
Interface Slot, JG257B HP 5800-48G-PoE+ TAA-compliant Switch with 1 Interface
Slot, JG258A HP 5800-48G TAA-compliant Switch with 1 Interface Slot, JG258B
HP 5800-48G TAA-compliant Switch with 1 Interface Slot, JG225A HP 5800AF-48G
Switch, JG225B HP 5800AF-48G Switch, JG242A HP 5800-48G-PoE+ TAA-compliant
Switch with 2 Interface Slots, JG242B HP 5800-48G-PoE+ TAA-compliant Switch
with 2 Interface Slots, JG243A HP 5820-24XG-SFP+ TAA-compliant Switch, JG243B
HP 5820-24XG-SFP+ TAA-compliant Switch, JG259A HP 5820X-14XG-SFP+
TAA-compliant Switch with 2 Interface Slots & 1 OAA Slot, JG259B HP
5820-14XG-SFP+ TAA-compliant Switch with 2 Interface Slots and 1 OAA Slot,
JC106A HP 5820-14XG-SFP+ Switch with 2 Slots, JC106B HP 5820-14XG-SFP+ Switch
with 2 Interface Slots & 1 OAA Slot, JG219A HP 5820AF-24XG Switch, JG219B HP
5820AF-24XG Switch, JC102A HP 5820-24XG-SFP+ Switch, JC102B HP 5820-24XG-SFP+
Switch

 CVE-2014-9295

VSR (Comware 7)
 R0204P01
 JG810AAE HP VSR1001 Virtual Services Router 60 Day Evaluation Software,
JG811AAE HP VSR1001 Comware 7 Virtual Services Router, JG812AAE HP VSR1004
Comware 7 Virtual Services Router, JG813AAE HP VSR1008 Comware 7 Virtual
Services Router

 CVE-2014-9295

7900 (Comware 7)
 R2122
 JG682A HP FlexFabric 7904 Switch Chassis, JG841A HP FlexFabric 7910 Switch
Chassis, JG842A HP FlexFabric 7910 7.2Tbps Fabric / Main Processing Unit,
JH001A HP FlexFabric 7910 2.4Tbps Fabric / Main Processing Unit

 CVE-2014-9295

5130 (Comware 7)
 R3108P03
 JG932A HP 5130-24G-4SFP+ EI Switch, JG933A HP 5130-24G-SFP-4SFP+ EI Switch,
JG934A HP 5130-48G-4SFP+ EI Switch, JG936A HP 5130-24G-PoE+-4SFP+ (370W) EI
Switch, JG937A HP 5130-48G-PoE+-4SFP+ (370W) EI Switch, JG975A HP
5130-24G-4SFP+ EI Brazil Switch, JG976A HP 5130-48G-4SFP+ EI Brazil Switch,
JG977A HP 5130-24G-PoE+-4SFP+ (370W) EI Brazil Switch, JG978A HP
5130-48G-PoE+-4SFP+ (370W) EI Brazil Switch

 CVE-2014-9295

5700 (Comware 7)
 R2311P06
 JG894A HP FlexFabric 5700-48G-4XG-2QSFP+ Switch, JG895A HP FlexFabric
5700-48G-4XG-2QSFP+ TAA-compliant Switch, JG896A HP FlexFabric
5700-40XG-2QSFP+ Switch, JG897A HP FlexFabric 5700-40XG-2QSFP+ TAA-compliant
Switch, JG898A HP FlexFabric 5700-32XGT-8XG-2QSFP+ Switch, JG899A HP
FlexFabric 5700-32XGT-8XG-2QSFP+ TAA-compliant Switch

 CVE-2014-9295

VCX
 9.8.17
 J9672A HP VCX V7205 Platform w/ DL360 G7 Srvr, J9668A HP VCX IPC V7005
Pltfrm w/ DL120 G6 Srvr, JC517A HP VCX V7205 Platform w/DL 360 G6 Server,
JE355A HP VCX V6000 Branch Platform 9.0, JC516A HP VCX V7005 Platform w/DL
120 G6 Server, JC518A HP VCX Connect 200 Primry 120 G6 Server, J9669A HP VCX
IPC V7310 Pltfrm w/ DL360 G7 Srvr, JE341A HP VCX Connect 100 Secondary,
JE252A HP VCX Connect Primary MIM Module, JE253A HP VCX Connect Secondary MIM
Module, JE254A HP VCX Branch MIM Module, JE355A HP VCX V6000 Branch Platform
9.0, JD028A HP MS30-40 RTR w/VCX + T1/FXO/FXS/Mod, JD023A HP MSR30-40 Router
with VCX MIM Module, JD024A HP MSR30-16 RTR w/VCX Ent Br Com MIM, JD025A HP
MSR30-16 RTR w/VCX + 4FXO/2FXS Mod, JD026A HP MSR30-16 RTR w/VCX + 8FXO/4FXS
Mod, JD027A HP MSR30-16 RTR w/VCX + 8BRI/4FXS Mod, JD029A HP MSR30-16 RTR
w/VCX + E1/4BRI/4FXS, JE340A HP VCX Connect 100 Pri Server 9.0, JE342A HP VCX
Connect 100 Sec Server 9.0

 CVE -2014-9293 CVE-2014-9294 CVE-2014-9295

HISTORY
Version:1 (rev.1) - 9 December 2015 Initial release

Third Party Security Patches: Third party security patches that are to be
installed on systems running Hewlett Packard Enterprise (HPE) software
products should be applied in accordance with the customer's patch management
policy.

Support: For issues about implementing the recommendations of this Security
Bulletin, contact normal HPE Services support channel. For other issues about
the content of this Security Bulletin, send e-mail to security-alert@hpe.com.

Report: To report a potential security vulnerability with any HPE supported
product, send Email to: security-alert@hpe.com

Subscribe: To initiate a subscription to receive future HPE Security Bulletin
alerts via Email: http://www.hpe.com/support/Subscriber_Choice

Security Bulletin Archive: A list of recently released Security Bulletins is
available here: http://www.hpe.com/support/Security_Bulletin_Archive

Software Product Category: The Software Product Category is represented in
the title by the two characters following HPSB.

3C = 3COM
3P = 3rd Party Software
GN = HPE General Software
HF = HPE Hardware and Firmware
MU = Multi-Platform Software
NS = NonStop Servers
OV = OpenVMS
PV = ProCurve
ST = Storage Software
UX = HP-UX

Copyright 2015 Hewlett Packard Enterprise

Hewlett Packard Enterprise shall not be liable for technical or editorial
errors or omissions contained herein. The information provided is provided
"as is" without warranty of any kind. To the extent permitted by law, neither
HP or its affiliates, subcontractors or suppliers will be liable for
incidental,special or consequential damages including downtime cost; lost
profits; damages relating to the procurement of substitute products or
services; or damages for loss of data, or software restoration. The
information in this document is subject to change without notice. Hewlett
Packard Enterprise and the names of Hewlett Packard Enterprise products
referenced herein are trademarks of Hewlett Packard Enterprise in the United
States and other countries. Other product and company names mentioned herein
may be trademarks of their respective owners.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJWaIf8AAoJEGIGBBYqRO9/niwH/1gOxhFP9igEKTVRvyiwpuGK
49vz5+ur4/ygiMMyx2UaF5J5VfKqkOTIA58vqFh16+Ir154DeAJvmNgoYcFTZc+g
Bdp9ZodU27vzr+daNirEWfAN0wlLM/BEqFJfCPSX4GhpwUB3jGXMQaxLcYgE0M2o
IKxFiWNs+ujU8v/EBl/GsPezRprj9ngxPtLjS00bRPscxlYgqR4AMiMHDgL7+ZuS
+/SEgUjE6WPB3oprnhFXJG00lY1IvqqXirY/Abi7tE8MeX2vQwxoDv+HncuX2L8a
XrrNCvtaAPgBrlPcgrmTelaLBbhqxPRjVNOCu7P44yhENsGaQ8N3Us8BY4M0Ny8=
=tMW8
-----END PGP SIGNATURE-----





Copyright © 1995-2018 LinuxRocket.net. All rights reserved.