HP Client Automation and Radia Client Automation is vulnerable to remote code execution

Overview Radia Client Automation previously sold under the name HP Client Automation agent prior to version 9.1 is vulnerable to arbitrary remote code execution. Description According to ZDI's advisory for ZDI-15-363, which has been assigned CVE-2015-7860: "This vulnerability allows remote...

CVE-2015-7861

The CVE-2015-7861 vulnerability affects Hewlett-Packard/Radia Client Automation agent (formerly HP Client Automation) before version 9.1. An unauthenticated attacker could remotely execute arbitrary code by sending arbitrary commands to the agent, potentially gaining SYSTEM privileges. Exploitati...