HP ProCurve switches shipped with malware
Hewlett Packard has issued an advisory about certain ProCurve 5400zl switches that have been shipped with a virus present on the CompactFlash (CF) cards included with the devices. According to HP, the affected switches were all shipped after 30 April 2011 and the affected serial numbers are listed in the advisory.
The virus apparently only activates when the CF card is removed from the switch and is read in a PC. It is not currently known exactly which virus is present on the switches in question and which operating systems it can infect. HP is offering a script on request that can be executed directly on the switch to remove the virus. The company will also exchange the affected devices free of charge.