critical10.0Public exploit code
CVE-2014-2623
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Data Protector 8.10 - Remote Command Execution (Metasploit)2015-03-06 · remote · windows · Verified
- HP Data Protector 8.x - Remote Command Execution2015-01-30 · remote · hp-ux · Verified
- HP Data Protector Manager 8.10 - Remote Command Execution2014-07-14 · remote · windows · Verified
Impact
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Storage Data Protector | Versions 8.0, 8.10 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130658/HP-Data-Protector-8.10-Remote-Command-Execution.html
- http://www.exploit-db.com/exploits/34066/
- http://www.exploit-db.com/exploits/35961
- http://www.exploit-db.com/exploits/36304
- http://www.osvdb.org/109069
- http://www.securitytracker.com/id/1030583
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04373818
- http://packetstormsecurity.com/files/130658/HP-Data-Protector-8.10-Remote-Command-Execution.html
- http://www.exploit-db.com/exploits/34066/
- http://www.exploit-db.com/exploits/35961
- http://www.exploit-db.com/exploits/36304
- http://www.osvdb.org/109069
- http://www.securitytracker.com/id/1030583
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04373818