HP Data Protector Multiple Vulnerabilities (HPSBMU03321 SSRT101677)

critical Nessus Plugin ID 83030

Synopsis

The remote host is affected by multiple vulnerabilities.

Description

The HP Data Protector running on the remote host is affected by multiple unspecified vulnerabilities that can allow a remote attacker to gain elevated privileges, trigger a denial of service, or execute arbitrary code with System privileges.

Solution

Apply the appropriate patch according to the vendor's advisory.

See Also

http://www.nessus.org/u?aac99258

Plugin Details

Severity: Critical

ID: 83030

File Name: hp_data_protector_hpsbmu03321.nasl

Version: 2.13

Type: combined

Family: Misc.

Published: 4/23/2015

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2015-2116

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:hp:storage_data_protector

Required KB Items: Services/data_protector/version

Exploit Ease: No known exploits are available

Patch Publication Date: 4/20/2015

Vulnerability Publication Date: 4/20/2015

Reference Information

CVE: CVE-2015-2116

BID: 74249

HP: HPSBMU03321, SSRT101677, emr_na-c04636829