CVE-2011-4162 The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow rem...
HighCVSS 7.5
EPSS 7.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc protecttools device access manager | <= 6.0.0.12 | No fix listed |
| HP Inc protecttools device access manager | = 6.0.0.9 | No fix listed |
| HP Inc protecttools device access manager | = 6.0.0.10 | No fix listed |
References
- SSRT100536 vendor-advisory
- SSRT100795 vendor-advisory
- hp-device-unspec-code-execution(71600) vdb-entry
- www.htbridge.ch exploit