[security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03813919 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03813919 Version: 2 HPSBST02890 rev....

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

Default credentials

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

CVE-2013-2342

CVE-2013-2342 affects HP StoreOnce D2D Backup System prior to software 3.0.0, where a pre-set HPSupport password (badg3r5) enables remote administrative access via SSH and can lead to data deletion. Public sources (NVD, Red Hat, HP Security Bulletin) confirm the issue and indicate affected versio...

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

Default Password (badg3r5) for 'HPSupport' Account

The account 'HPSupport' on the remote host has the password 'badg3r5'. An attacker may leverage this issue to gain administrative access to the affected system. Note that HP StoreOnce D2D Backup systems running software version 2.2.17 / 1.2.17 or older are known to have an account that uses these...