PT-2013-3685 · Hewlett Packard · Hp Storeonce D2D

Publicado 2013-06-29 · Atualizado 2019-10-09 · CVE-2013-2342

Positive Technologies (AI Summary)

CVSS v2.0

7.7

Alta

Vetor base

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP StoreOnce D2D backup system versions prior to 3.0.0

Description The issue concerns a default password for the HPSupport account, which is set to badg3r5. This allows remote attackers to gain administrative access and potentially delete data by establishing an SSH session.

Recommendations For versions prior to 3.0.0, update the software to version 3.0.0 or later to change the default password for the HPSupport account. As a temporary workaround, consider changing the default password for the HPSupport account to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-2342

Produtos afetados

Hp Storeonce D2D

Referências · 3

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2342 · Nota de Segurança
• http://lolware.net/hpstorage.html · Nota