Vulnerability in HP Storeonce D2d

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

Affected products

Hp Storeonce_d2d — versions 2.1.01, 2.2.00, 2.2.10
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

hp-security-alert@hp.com (x_refsource_MISC)
hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)