CVE-2016-2004 HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerab...
CriticalCVSS 9.8
EPSS 94.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc data protector | >= 7.0, < 7.03_108 | 7.03_108 |
| HP Inc data protector | >= 8.0, < 8.15 | 8.15 |
| HP Inc data protector | >= 9.0, < 9.06 | 9.06 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- VU#267328 third-party-advisory us-government-resource
- 1035631 third-party-advisory vdb-entry
- h20566.www2.hpe.com vendor-advisory
- 39858 exploit third-party-advisory vdb-entry
- 39874 exploit third-party-advisory vdb-entry