Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2016-2004
HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-2004

2016-04-2111:00:04
CWE-306
mitre
web.nvd.nist.gov
50
hpe data protector
cve-2016-2004
remote attack
arbitrary code execution
nvd
authentication

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.523

Percentile

97.6%

JSON

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

Affected configurations

Nvd
Node
hpdata_protectorRange7.0–7.03_108
OR
hpdata_protectorRange8.0–8.15
OR
hpdata_protectorRange9.0–9.06
VendorProductVersionCPE
hpdata_protector*cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*

Related

prion 2
nvd 2
cvelist 2
exploitdb 5
exploitpack 3
zdt 4
checkpoint_advisories 2
packetstorm 3
cert 1
saint 12
metasploit 2
openvas 3
nessus 2
seebug 1
securityvulns 2
threatpost 1
cve 1
prion
prion
Authentication flaw
2016-04-21 11:00:00
Code injection
2014-07-18 00:55:00
nvd
nvd
CVE-2016-2004
2016-04-21 11:00:04
CVE-2014-2623
2014-07-18 00:55:04
cvelist
cvelist
CVE-2016-2004
2016-04-21 10:00:00
CVE-2014-2623
2014-07-18 01:00:00
exploitdb
exploitdb
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.x - Remote Command Execution
2015-01-30 00:00:00
exploitpack
exploitpack
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.x - Remote Command Execution
2015-01-30 00:00:00
zdt
zdt
HP Data Protector A.09.00 - Arbitrary Command Execution
2016-05-26 00:00:00
HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)
2016-05-31 00:00:00
HP Data Protector 8.10 Remote Command Execution Exploit
2015-03-07 00:00:00
checkpoint_advisories
checkpoint_advisories
HP Data Protector Remote Command Execution (CVE-2016-2004)
2016-10-26 00:00:00
HP Data Protector Opcode 28 and 11 Command Execution (CVE-2013-2347; CVE-2014-2623)
2014-08-06 00:00:00
packetstorm
packetstorm
HP Data Protector A.09.00 Command Execution
2016-05-26 00:00:00
HP Data Protector Encrypted Communication Remote Command Execution
2016-06-07 00:00:00
HP Data Protector 8.10 Remote Command Execution
2015-03-05 00:00:00
cert
cert
HP Data Protector does not perform authentication and contains an embedded SSL private key
2016-04-22 00:00:00
saint
saint
HP Data Protector missing authentication
2016-05-31 00:00:00
HP Data Protector missing authentication
2016-05-31 00:00:00
HP Data Protector missing authentication
2016-05-31 00:00:00
metasploit
metasploit
HP Data Protector Encrypted Communication Remote Command Execution
2016-05-31 21:58:32
HP Data Protector 8.10 Remote Command Execution
2015-03-04 19:01:06
openvas
openvas
HP Data Protector Encrypted Communications Arbitrary Command Execution Vulnerability
2016-07-08 00:00:00
HP Data Protector Multiple Vulnerabilities (Apr 2016)
2016-04-26 00:00:00
HP (OpenView Storage) Data Protector Multiple Vulnerabilities
2014-02-18 00:00:00
nessus
nessus
HP Data Protector Hard-coded Cryptographic Key (HPSBGN03580)
2016-05-06 00:00:00
HP Data Protector 7.0x < 7.03 build 108 / 8.1x < 8.15 / 9.0x < 9.06 Multiple Vulnerabilities (HPSBGN03580) (Bar Mitzvah)
2016-04-29 00:00:00
seebug
seebug
HP Data Protector 8.x - Remote Command Execution
2015-09-17 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBMU03072 SSRT101644 rev.1 - HP Data Protector, Remote Execution of Arbitrary Code
2014-07-21 00:00:00
HP Storage Data Protector code execution
2014-07-21 00:00:00
threatpost
threatpost
Operation Prowli Profits On Weak IoT Devices, Servers
2018-06-07 17:06:55
cve
cve
CVE-2014-2623
2014-07-18 01:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.523

Percentile

97.6%

JSON
Related for CVE-2016-2004
prion2nvd2cvelist2exploitdb5exploitpack3zdt4checkpoint_advisories2packetstorm3cert1saint12metasploit2openvas3nessus2seebug1securityvulns2threatpost1cve1