« Volver al listado

CVE-2013-2342

Estado: ModificadaAlta (7.7)—

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Storeonce D2D

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2342",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.7,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-30T19:27:59.003",
  "references": [
    {
      "url": "http://www.lolware.net/hpstorage.html",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.lolware.net/hpstorage.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session."
    },
    {
      "lang": "es",
      "value": "El sistema de backup HP StoreOnce D2D con software anterior a v3.0.0 tiene la contraseña por defecto badg3r5 para la cuenta HPSupport, lo que permite a atacantes remotos obtener acceso administrativo y eliminar datos mediante una sesión SSH."
    }
  ],
  "lastModified": "2026-06-16T23:53:10.190",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "211072BB-AE4A-4901-BDDA-0169E7618C80",
              "versionEndIncluding": "2.2.17"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BEBD28B-7020-4910-8516-C800D1E8DF2E"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.2.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81DCC09B-63CD-4CD3-A262-EF71DE57E94D"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5061B50F-1463-4A43-88A9-FC48DF8A0482"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8AC7F05-93D7-45BF-8D45-41132ADC4EE4"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6378C0A-B91D-4ED3-92CB-6E08EC16950E"
            },
            {
              "criteria": "cpe:2.3:a:hp:storeonce_d2d:2.2.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35A3DDCF-2AC7-40C4-9C7D-4390F66E993E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}