data_protector 漏洞

严重CVE-2016-20042016/04/22

HP Data Protector - Arbitrary Command Execution

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. This vulnerability exists because of an incomplete fix for CVE-2014-2623.

data_protectorPoC 已收录RCE

CVSS9.8EPSS 92.7%

严重CVE-2011-09232011/02/09

CVE-2011-0923

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."

data_protectorRCE

CVSS10.0EPSS 89.9%

严重CVE-2011-09222011/02/09

CVE-2011-0922

The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.

data_protectorRCE

CVSS10.0EPSS 82.0%

data_protector

关联漏洞

HP Data Protector - Arbitrary Command Execution

CVE-2011-0923

CVE-2011-0922