Path Traversal in Hp Data_protector

CVE-2014-5160

Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 req…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.247 (96.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2014-5160?
CVE-2014-5160 is a vulnerability in Hp Data_protector, classified under Path Traversal. Published 2014-08-01.
Is CVE-2014-5160 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.