CVE-2016-2004

Critical

Published: 21/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code due to lack of authentication. This vulnerability exists because of an incomplete fix for CVE-2014-2623.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to unauthorized access and execution of malicious code on their systems.

Recommendation

It is recommended to update HPE Data Protector to the latest version to mitigate this vulnerability and ensure proper authentication mechanisms.

Original NVD description (English source)

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.