CVE-2006-4201

Exploitation likely. EPSS gives it a 10% chance of exploitation in the next 30 days. A vendor fix is available.

CVSS 2.07.5High EPSS percentile96th10% chance in 30 days CISA KEVNot listedNo confirmed exploitation
No public exploit known FixVendor fixNo build named by the sources

Published 2006-08-17Updated 2026-04-16Sources: CVE.org, NVD

NVD CVE.org

What to do

The vendor has published a fix. Version details are below where the sources state them.

Hp Openview Storage Data ProtectorAffected: ≤ 5.5Upgrade to: after 5.5Stated by: NVD

Versions as the sources state them. Full version matrix after sign-in

Steps

Written by AI from the record

Check whether you run HP OpenView Storage Data Protector 5.1 or 5.5, including its backup agents and Cell Manager.
If your release is earlier than 20060810, arrange an upgrade to the vendor-remediated 20060810 release.
Until upgraded, limit access to the backup system to only required internal administration and backup hosts.
Ask your IT provider to review backup-server and agent activity for unexpected remote connections or programs.

Vendor advisory Some work to apply

Is your organisation exposed?Request an assessment to establish which checks fit your systems.

What it is

From the CVE record

Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation.

In plain language

Written by AI from the record

If you use HP OpenView Storage Data Protector 5.1 or 5.5 before 20060810, update it because an outsider may be able to take over a backup system; other small businesses are not affected.

Remote, unauthenticated code execution in HP OpenView Storage Data Protector backup agents and Cell Manager through an unspecified authentication and input-validation flaw.

If you're affected

Backup system takeover
Backup data exposure
Recovery disruption
Ransomware risk

What is it

This is a flaw in older backup-management software that may let an outsider run their own programs on a backup machine. Think of it as someone finding a way to use the master key cabinet for your backups: they could interfere with recovery operations or access the systems that backups protect.

Who is affected

This matters to you if you run HP OpenView Storage Data Protector 5.1 or 5.5, whether on the central backup-management server or its backup agents. It is especially important for businesses that rely on it to protect important records and restore systems after an outage. It is only a risk if an attacker can reach the affected backup service over the network.

How urgent is it

A remote attacker may be able to take control of an affected backup component, so this deserves scheduled, prompt attention. There is no record of confirmed active exploitation or public exploit code, which supports an amber rather than emergency response.

What to do — in detail

Confirm the installed HP OpenView Storage Data Protector version on the Cell Manager and every deployed backup agent, then identify any 5.1 or 5.5 installation earlier than 20060810. Target the vendor-remediated 20060810 release; review the vendor's release notes and upgrade guidance before deployment, since this is legacy software and the findings do not provide branch-specific upgrade or compatibility details.

If an immediate upgrade is delayed, restrict network access to Cell Manager and agent services to the specific backup infrastructure and administrator hosts that require it; do not expose them broadly. Review connection and process activity on those hosts for unexpected remote access or program execution during the remediation window. CISA has not assigned a required remediation date because this CVE is not in its Known Exploited Vulnerabilities catalog.

Technical context

CVSS v2 is 7.5 (High): AV:N/AC:L/Au:N/C:P/I:P/A:P. The issue is an unspecified weakness related to authentication and input validation (NVD-CWE-Other) that permits remote arbitrary code execution on an agent. EPSS predicts a 10.1% likelihood of exploitation and is falling, placing it in the 95th percentile; this is predictive only. It is not listed in CISA KEV, and no public exploit code is on record; exploit maturity is therefore unconfirmed.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.