PT-2018-8280 · Hewlett Packard · Hpe Data Protector

Published 2018-02-15 · Updated 2018-03-07 · CVE-2017-5808

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 8.17 HPE Data Protector versions prior to 9.09

Description A Remote Arbitrary Code Execution issue was found.

Recommendations For versions prior to 8.17, update to version 8.17 or later. For versions prior to 9.09, update to version 9.09 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-5808

Affected Products

Hpe Data Protector

References · 5

• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5808 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5808 · Vendor Advisory
• http://securityfocus.com/bid/100088 · Note
• https://tenable.com/security/research/tra-2017-26 · Note