PT-2013-3689

Name of the Vulnerable Software and Affected Versions HP StoreOnce D2D Backup System versions 1.x through 1.2.18 HP StoreOnce D2D Backup System versions 2.x through 2.2.x Description The issue allows remote attackers to cause a denial of service via unknown vectors. Recommendations For HP StoreOn...

CVE-2013-2353: Undefined Security Weakness

Unspecified vulnerability in HP StoreOnce D2D Backup System 1.x before 1.2.19 and 2.x before 2.3.0 allows remote attackers to cause a denial of service via unknown vectors...

HP to Patch Remote Backdoor in StoreVirtual Systems

A few weeks after admitting that it had put an administrative backdoor in its StoreOnce backup servers, HP has said it has a similar mechanism in its StoreVirtual storage systems that allows a remote user to access the operating system. The company said the function is meant for remote support us...

HP StoreOnce D2D unauthorized access

There is built-in support account with permissions to reset administrator's password...

[security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03813919 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03813919 Version: 2 HPSBST02890 rev....

Re: [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification

VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP StoreOnce D2D Backup System. The vulnerability could be exploited remotely resulting in unauthorized access and modification. A user who is logged in via the HPSupport user account does not have access to the dat...

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

Default credentials

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

CVE-2013-2342

CVE-2013-2342 affects HP StoreOnce D2D Backup System prior to software 3.0.0, where a pre-set HPSupport password (badg3r5) enables remote administrative access via SSH and can lead to data deletion. Public sources (NVD, Red Hat, HP Security Bulletin) confirm the issue and indicate affected versio...

PT-2013-3685

Name of the Vulnerable Software and Affected Versions HP StoreOnce D2D backup system versions prior to 3.0.0 Description The issue concerns a default password for the HPSupport account, which is set to badg3r5. This allows remote attackers to gain administrative access and potentially delete data...

CVE-2013-2342: Undefined Security Weakness

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

Default Password (badg3r5) for 'HPSupport' Account

The account 'HPSupport' on the remote host has the password 'badg3r5'. An attacker may leverage this issue to gain administrative access to the affected system. Note that HP StoreOnce D2D Backup systems running software version 2.2.17 / 1.2.17 or older are known to have an account that uses these...