Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and…

published 2010-09-09 16y ago modified 2026-06-16 4mo ago also EUVD-2010-3009

cvss: 7.2; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 5.5%; EPSS 5.5% chance of exploitation in 30 days, percentile 92%
public exploits: 2; Metasploit and Exploit-DB

Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.

Is CVE-2010-3007 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Timeline

2010-09-09 First public exploit (Metasploit exploit/windows/misc/hp_dataprotector_dtbclslogin)
2010-09-09 Published

Exploit prediction

5.52% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/misc/hp_dataprotector_dtbclslogin HP Data Protector DtbClsLogin Buffer Overflow metasploit exploit, normal rank, 2010-09-09
EDB-23290 HP Data Protector - DtbClsLogin Buffer Overflow (Metasploit) remote, 2012-12-11

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C

References

www13.itrc.hp.com /service/cki/docDisplay.do?docId=emr_na-c02498535
vendor-advisory

Sources

CVE List CVE-2010-3007
NVD CVE-2010-3007

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.