Vulnerability Details : CVE-2013-6194
Public exploit exists!
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.
Vulnerability category: Execute codeDenial of service
Products affected by CVE-2013-6194
- cpe:2.3:a:hp:storage_data_protector:6.21:-:*:*:*:redhat_enterprise_linux:*:*
- cpe:2.3:a:hp:storage_data_protector:6.21:-:*:*:*:hp-ux:*:*
- cpe:2.3:a:hp:storage_data_protector:6.21:-:*:*:*:windows_server_2003:*:*
- cpe:2.3:a:hp:storage_data_protector:6.21:-:*:*:*:windows_server_2008:*:*
- cpe:2.3:a:hp:storage_data_protector:6.20:-:*:*:*:windows_server_2003:*:*
- cpe:2.3:a:hp:storage_data_protector:6.20:-:*:*:*:windows_server_2008:*:*
- cpe:2.3:a:hp:storage_data_protector:6.21:-:*:*:*:solaris:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-6194
77.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2013-6194
-
HP Data Protector Backup Client Service Directory Traversal
Disclosure Date: 2014-01-02First seen: 2020-04-26exploit/windows/misc/hp_dataprotector_traversalThis module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists in the Backup Client Service (OmniInet.exe) and is triggered when parsing packets with opcode 42. This module has been tested successfully
CVSS scores for CVE-2013-6194
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2013-6194
-
http://www.exploit-db.com/exploits/31181
HP Data Protector - Backup Client Service Directory Traversal (Metasploit) - Windows remote ExploitExploit
-
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
Vendor Advisory
Jump to