How severe is CVE-2013-4840?

CVE-2013-4840 has a CVSS 2.0 base score of 7.8, rated high severity.

Is CVE-2013-4840 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (83rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-4840?

CVE-2013-4840 primarily affects Hp Secbladefw. In total, 17 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-4840?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2013-4840 published?

CVE-2013-4840 was published on 2014-07-28 and last updated on 2026-06-16.

CVE-2013-4840

CVE-2013-4840 is a high-severity vulnerability in Hp Secbladefw with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.8)
EPSS exploit prediction: 3% (83rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Hp Secbladefw
Published: 2014-07-28
Last modified: 2026-06-16

Description

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.

Frequently asked questions

What is CVE-2013-4840?: Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.
How severe is CVE-2013-4840?: CVE-2013-4840 has a CVSS 2.0 base score of 7.8, rated high severity.
Is CVE-2013-4840 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (83rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-4840?: CVE-2013-4840 primarily affects Hp Secbladefw. In total, 17 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-4840?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2013-4840 published?: CVE-2013-4840 was published on 2014-07-28 and last updated on 2026-06-16.

References

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03993467

Affected products (17)

cpe:2.3:a:h3c:secbladefw:5.20:*:*:*:*:*:*:*
cpe:2.3:a:h3c:secpath1000fe:5.20:*:*:*:*:*:*:*
cpe:2.3:h:h3c:f1000-e_vpn_firewall:0235a26g:*:*:*:*:*:*:*
cpe:2.3:h:h3c:s5820_secblade_vpn_firewall_module:0231a94j:*:*:*:*:*:*:*
cpe:2.3:h:h3c:s7500e_secblade_vpn_firewall_module:0231a832:*:*:*:*:*:*:*
cpe:2.3:h:h3c:s9500e_secblade_vpn_firewall_module:0231a0av:*:*:*:*:*:*:*
cpe:2.3:h:h3c:sr66_gigabit_firewall_module:0231a88a:*:*:*:*:*:*:*
cpe:2.3:h:h3c:sr88_firewall_processing_module:0231a88l:*:*:*:*:*:*:*
cpe:2.3:a:hp:secbladefw:5.20:*:*:*:*:*:*:*
cpe:2.3:a:hp:secpath1000fe:5.20:*:*:*:*:*:*:*
cpe:2.3:h:hp:10500\/7500_advanced_vpn_firewall_module:jd249a:*:*:*:*:*:*:*
cpe:2.3:h:hp:12500_vpn_firewall_module:jc635a:*:*:*:*:*:*:*
cpe:2.3:h:hp:5820_vpn_firewall_module:jd255a:*:*:*:*:*:*:*
cpe:2.3:h:hp:6600_firewall_processing_rtr_module:jd250a:*:*:*:*:*:*:*
cpe:2.3:h:hp:8800_firewall_processing_module:jd251a:*:*:*:*:*:*:*
cpe:2.3:h:hp:9500_vpn_firewall_module:jd245a:*:*:*:*:*:*:*
cpe:2.3:h:hp:s1000-e_vpn_firewall_appliance:jd272a:*:*:*:*:*:*:*