HP ProCurve 5400 zl Switch, Flash Cards Infected with Malware

HP has released a security bulletin (CVE-2012-0133) indicating that a "[...] vulnerability has been identified with certain HP ProCurve 5400 zl switches containing compact flash cards which may be infected with a virus. Reuse of an infected compact flash card in a personal computer could result in a compromise of that system's integrity." [1]

A list of of HP 5400 zl series switch purchased after April 30, 2011 with their serial numbers as well as a resolution is posted here.

[1] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03249176

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu