CVE-2011-0922

critical

HPE

CVSS v3 Base Score

10.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Score

82.0%

Exploitation probability in 30 days

Top 1% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Published: February 9, 2011 (5574 days ago)

Last Modified: April 29, 2026

Vendor: HPE

Source: NVD

Description

The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.

CWE-20

hp data protector