CVE-2015-1498

The CVE-2015-1498 issue affects Persistent Systems Radia Client Automation. Connected sources confirm a improper access-control vulnerability in specific requests (notably getUsers, addAssigneesToRole, removeAssigneesFromRole) that enables remote attackers to enumerate user accounts and modify us...

CVE-2015-1497

CVE-2015-1497 affects Persistent Systems Radia Client Automation (RCA) and its radexecd.exe component. A remote, unauthenticated attacker can send a crafted request to TCP port 3465/TCP to execute arbitrary commands with the privileges of the radexecd process. Affected RCA versions include 7.9, 8...

CVE-2015-1497

radexecd.exe in Persistent Systems Radia Client Automation RCA 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465...

CVE-2015-1497: Improper Control of Generation of Code

radexecd.exe in Persistent Systems Radia Client Automation RCA 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465...

CVE-2015-1498: Undefined Security Weakness

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to 1 enumerate user accounts via a getUsers request, 2 assign a role to a user account via an addAssigneesToRole request, 3 remove a role from a user account via a...

HP Client Automation Command Injection

This module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon radexecd.exe, which doesn't authenticate execution requests by default. This module has been tested...

HP Client Automation radexecd.exe Remote Command Execution

The HP Client Automation service on the remote port is affected by a command execution vulnerability. The vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Client Automation. Authentication is not required to exploit the vulnerability. The flaw exis...

HP Client Automation Satellite Web Console Detection

HP Client Automation Satellite, the portion of HP Client Automation that is installed on client systems, was detected on the remote host. This is used for managing client devices. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid56165; scriptversion"1.5";...

HP Client Automation Default Credentials

The remote install of HP Client Automation has a default password 'secret' set. An attacker may connect to it to reconfigure the application and control remote devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

HP Client Automation Web Console Detection

HP Client Automation, a web-based application for managing client devices, was detected on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid52978; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Client Automation Web Console...

HP Client Automation code execution

Code execution with radexecd.exe TCP/3465...

Hewlett-Packard Client Automation radexecd.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Client Automation. Authentication is not required to exploit this vulnerability. The flaw exists within the radexecd.exe component which listens by default on TCP port 3465. When handling a remo...

CVE-2011-0889

Unspecified vulnerability in HP Client Automation Enterprise aka HPCA or Radia Notify 5.11, 7.2, 7.5, 7.8, and 7.9 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Client Automation Enterprise aka HPCA or Radia Notify 5.11, 7.2, 7.5, 7.8, and 7.9 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-0889

HP Client Automation (HPCA/Radia Notify) is affected by CVE-2011-0889. The vulnerability resides in radexecd.exe listening on TCP port 3465; when handling remote execute requests, the service does not properly authenticate the requester, enabling a remote attacker to execute arbitrary code, typic...

CVE-2011-0889: Undefined Security Weakness

Unspecified vulnerability in HP Client Automation Enterprise aka HPCA or Radia Notify 5.11, 7.2, 7.5, 7.8, and 7.9 allows remote attackers to execute arbitrary code via unknown vectors...

[security bulletin] HPSBMA02644 SSRT100284 rev.1 - HP Client Automation Enterprise (HPCA) Running on Windows, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02750690 Version: 1 HPSBMA02644 SSRT100284 rev.1 - HP Client Automation Enterprise HPCA Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin...

CVE-2010-1972

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

Default configuration

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

CVE-2010-1972

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...