CVE-2011-0921

CVE-2011-0921 describes a critical remote code execution vulnerability in the crs.exe component of the Cell Manager Service within HP Data Protector. This flaw stems from insufficient validation of hostname, domain, and username credentials, allowing unauthenticated remote attackers to execute arbitrary code by sending specially crafted TCP data. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.