Vulnerability Details CVE-2017-5807
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.47
EPSS Ranking 97.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://www.securityfocus.com/bid/100088
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us
- https://www.tenable.com/security/research/tra-2017-26
- http://www.securityfocus.com/bid/100088
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us
- https://www.tenable.com/security/research/tra-2017-26
Products affected by CVE-2017-5807
-
cpe:2.3:a:hp:data_protector:6.10
-
cpe:2.3:a:hp:data_protector:6.11
-
cpe:2.3:a:hp:data_protector:7.0
-
cpe:2.3:a:hp:data_protector:7.03
-
cpe:2.3:a:hp:data_protector:7.03_108
-
cpe:2.3:a:hp:data_protector:8.0
-
cpe:2.3:a:hp:data_protector:8.14
-
cpe:2.3:a:hp:data_protector:8.15
-
cpe:2.3:a:hp:data_protector:9.09