CVE-2016-2005
CriticalSummary
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
Risk Assessment
This vulnerability may allow a remote attacker to gain control over the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update HPE Data Protector to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in HPE Data Protector
See all- CVE-2016-2008Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2007Critical
HPE Data Protector versions before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2006Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2004Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code due to lack of authentication. This vulnerability exists because of an incomplete fix for CVE-2014-2623.
Original NVD description (English source)
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.