CVE-2012-0123 - Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.0

CVE-2012-0123

Summary

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.

References

http://www.securityfocus.com/archive/1/521944
https://exchange.xforce.ibmcloud.com/vulnerabilities/73947

Vulnerable Configurations

cpe:2.3:a:hp:data_protector_express:5.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:5.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:6.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:6.0:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 05-01-2018 - 02:29)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

hp	HPSBMU02746 SSRT100781
xf	hp-dataprotector-code-execution(73947)

Last major update

05-01-2018 - 02:29

Published

14-03-2012 - 03:28

Last modified

05-01-2018 - 02:29