Multiple Vulnerabilities in Hyper Data Protector (PWN2OWN 2025)

Summary

Multiple vulnerabilities have been reported to affect Hyper Data Protector.

• CVE-2025-59389: If exploited, remote attackers can exploit the SQL injection vulnerability to execute unauthorized code or commands.
• CVE-2025-59388: If exploited, remote attackers can exploit the use of hard-coded password vulnerability to gain unauthorized access.

We have already fixed the vulnerabilities in the following version:

Recommendation

To fix the vulnerability, we recommend updating Hyper Data Protector to the latest version.

Updating Hyper Data Protector

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Hyper Data Protector" and then press ENTER.
   Hyper Data Protector appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Hyper Data Protector is already up to date.
5. Click OK.
   The system updates the application.