Accelerite Radia Client Automation vulnerabilities

CVE-2015-7861 [CRITICAL] CWE-264 CVE-2015-7861: Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling.

CVE-2015-7860 [CRITICAL] CWE-119 CVE-2015-7860: Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending a large amount of data in an environment that lacks relationship-based firewalling.

CVE-2015-7863 [MEDIUM] CWE-254 CVE-2015-7863: The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Autom The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

CVE-2015-7862 [MEDIUM] CWE-264 CVE-2015-7862: Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improperly implements the Role Based Access Control feature, which might allow remote attackers to modify an account's role assignments via unspecified vectors.