CVE-2016-2007
CriticalSummary
HPE Data Protector versions before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the organization's systems.
Recommendation
It is recommended to update HPE Data Protector to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in HPE Data Protector
See all- CVE-2016-2008Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2006Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2005Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2016-2004Critical
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code due to lack of authentication. This vulnerability exists because of an incomplete fix for CVE-2014-2623.
Original NVD description (English source)
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.