Skip to content
Fencer Vulns
high 7.2

CVE-2009-0714 in the critical feed json

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.…

published 2009-05-14 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-0714

cvss
7.2
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
51.6%
EPSS 51.6% chance of exploitation in 30 days, percentile 98%
public exploits
2
Exploit-DB

Summary

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.

Timeline

  1. Published
  2. First public exploit (EDB-9007)

Exploit prediction

51.61% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-9007 HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit) dos, 2009-06-23
  • EDB-9006 HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service dos, 2009-06-23

CVSS scores

assigned by version score vector
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.