CVE-2011-0921
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate...
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
Exploit likelihood
What each source reports
NVD Score used
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
- Record
CVE-2011-0921- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
- Record
CVE-2011-0921- Updated
- 2026-11-02
EUVDEUVD-2011-0933 No score
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
- Record
EUVD-2011-0933- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j2gx-pvcp-f968 No score
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate...
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
- Record
GHSA-j2gx-pvcp-f968- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0921 is a high vulnerability (CVSS 10.0) in Hp Data Protector, published February 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.3%, the 96th percentile. No source names a fixed version.