Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A

paulo_rribeiro — Wed, 02 Oct 2024 16:49:40 GMT

In our inspection routines we found vulnerabilities in the HPE OfficeConnect Switch 1820 24G J9980A.
vulnerabilities: Lighttpd < 1.4.35 Multiple Vulnerabilities - Active Check

Vulnerability Insight
The following flaws exist:
- mod_mysql_vhost module is not properly sanitizing user supplied input passed via the host-
name
- mod_evhost and mod_simple_vhost modules are not properly sanitizing user supplied input
via the hostname.

Vulnerability Detection Method
Sends a crafted HTTP GET request and checks the response.
Details: Lighttpd < 1.4.35 Multiple Vulnerabilities - Active Check
OID:1.3.6.1.4.1.25623.1.0.802072
Version used: 2023-02-01T10:08:40Z

References
cve: CVE-2014-2323
cve: CVE-2014-2324

I need help on how to resolve this vulnerability

Thanks

Re: Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A

Sunitha_Mod — Thu, 03 Oct 2024 04:03:03 GMT

Hello @paulo_rribeiro,

Thank you for posting.

HPE Networking forum has moved to Aruba Airheads Community and for HPE networking and Aruba product queries, we request you to visit and post your query here: Aruba Airheads Community

You can refer to the below link as well for more details:

HPE Networking forum migration to Aruba Airheads c... - Hewlett Packard Enterprise Community

topic Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A in Other HPE Product Questions

Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A

Re: Vulnerabilities Lighttpd in the HPE OfficeConnect Switch 1820 24G J9980A