Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-2004
HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-2004

2016-04-2111:00:04
CWE-306
[email protected]
web.nvd.nist.gov
44
hpe data protector
cve-2016-2004
remote attack
arbitrary code execution
nvd
authentication

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.522 Medium

EPSS

Percentile

97.6%

JSON

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

Affected configurations

NVD
Node
hpdata_protectorRange7.0–7.03_108
OR
hpdata_protectorRange8.0–8.15
OR
hpdata_protectorRange9.0–9.06

Related

prion 2
nvd 2
exploitpack 3
cvelist 2
exploitdb 3
packetstorm 3
checkpoint_advisories 2
cert 1
saint 12
zdt 4
openvas 3
nessus 2
cve 1
threatpost 1
securityvulns 2
seebug 1
prion
prion
Authentication flaw
2016-04-21 11:00:00
Code injection
2014-07-18 00:55:00
nvd
nvd
CVE-2016-2004
2016-04-21 11:00:04
CVE-2014-2623
2014-07-18 00:55:04
exploitpack
exploitpack
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.x - Remote Command Execution
2015-01-30 00:00:00
cvelist
cvelist
CVE-2016-2004
2016-04-21 10:00:00
CVE-2014-2623
2014-07-18 01:00:00
exploitdb
exploitdb
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.x - Remote Command Execution
2015-01-30 00:00:00
packetstorm
packetstorm
HP Data Protector A.09.00 Command Execution
2016-05-26 00:00:00
HP Data Protector Encrypted Communication Remote Command Execution
2016-06-07 00:00:00
HP Data Protector 8.10 Remote Command Execution
2015-03-05 00:00:00
checkpoint_advisories
checkpoint_advisories
HP Data Protector Remote Command Execution (CVE-2016-2004)
2016-10-26 00:00:00
HP Data Protector Opcode 28 and 11 Command Execution (CVE-2013-2347; CVE-2014-2623)
2014-08-06 00:00:00
cert
cert
HP Data Protector does not perform authentication and contains an embedded SSL private key
2016-04-22 00:00:00
saint
saint
HP Data Protector missing authentication
2016-05-31 00:00:00
HP Data Protector missing authentication
2016-05-31 00:00:00
HP Data Protector missing authentication
2016-05-31 00:00:00
zdt
zdt
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.x - Remote Command Execution Exploit
2010-01-16 00:00:00
openvas
openvas
HP Data Protector Encrypted Communications Arbitrary Command Execution Vulnerability
2016-07-08 00:00:00
HP Data Protector Multiple Vulnerabilities (Apr 2016)
2016-04-26 00:00:00
HP (OpenView Storage) Data Protector Multiple Vulnerabilities
2014-02-18 00:00:00
nessus
nessus
HP Data Protector Hard-coded Cryptographic Key (HPSBGN03580)
2016-05-06 00:00:00
HP Data Protector 7.0x < 7.03 build 108 / 8.1x < 8.15 / 9.0x < 9.06 Multiple Vulnerabilities (HPSBGN03580) (Bar Mitzvah)
2016-04-29 00:00:00
cve
cve
CVE-2014-2623
2014-07-18 01:00:00
threatpost
threatpost
Operation Prowli Profits On Weak IoT Devices, Servers
2018-06-07 17:06:55
securityvulns
securityvulns
HP Storage Data Protector code execution
2014-07-21 00:00:00
[security bulletin] HPSBMU03072 SSRT101644 rev.1 - HP Data Protector, Remote Execution of Arbitrary Code
2014-07-21 00:00:00
seebug
seebug
HP Data Protector 8.x - Remote Command Execution
2015-09-17 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.522 Medium

EPSS

Percentile

97.6%

JSON
Related for CVE-2016-2004
prion2nvd2exploitpack3cvelist2exploitdb3packetstorm3checkpoint_advisories2cert1saint12zdt4openvas3nessus2cve1threatpost1securityvulns2seebug1