Login Request a demo
Unscored severity · published Jul 18, 2014
CVE-2014-2623
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors
–
CVSS
90.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)90.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Storage Data Protector · HP
8.0; 8.0; 8.0; 8.0; 8.10; 8.10; +2 more · source: NVD
Affected product
SD
Storage Data Protector
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2623
Exploit
http://packetstormsecurity.com/files/130658/HP-Data-Protector-8.10-Remote-Command-Execution.html
Exploit
http://www.exploit-db.com/exploits/34066/
Exploit
http://www.exploit-db.com/exploits/35961
Exploit
http://www.exploit-db.com/exploits/36304
Broken Link
http://www.osvdb.org/109069
www.securitytracker.com
http://www.securitytracker.com/id/1030583
More from Storage Data Protector
–
CVE-2015-2116
Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via…
–
CVE-2013-6195
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008
–
CVE-2013-6194
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905
–
CVE-2013-2350
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1897
–
CVE-2013-2349
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1896