Malware shipped on HP switches

HP has issued a warning to customers after it shipped a string of switches infected with malware.

The malware was hidden on flash drives that could infect computers if the device was inserted into them.

HP issued a security advisory and said onlt that the malware was a risk if the storage card was reused in computers.

The gaffe, first reported by The Register, affected HP ProCurve 5400 zl switches that were purchased after April 30 last year.

Users can purge the malware by running a script used on the HP switch manager which the company said will not disrupt operations of the switch. Alternatively the management module can be replaced.

A list of vulnerable models was available on the advisory.

In 2008, AusCERT warned that low-risk malware was shipped on USB drives by HP Australia for its ProLiant servers.

Copyright © SC Magazine, Australia