Vulnerability Details : CVE-2014-2623

Public exploit exists!
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Published 2014-07-18 00:55:05
Updated 2017-01-07 02:59:49
Source HP Inc.
View at NVD,   CVE.org
Vulnerability category: Execute code

Exploit prediction scoring system (EPSS) score for CVE-2014-2623

Probability of exploitation activity in the next 30 days: 52.18%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2014-2623

  • HP Data Protector 8.10 Remote Command Execution
    Disclosure Date: 2014-11-02
    First seen: 2020-04-26
    exploit/windows/misc/hp_dataprotector_cmd_exec
    This module exploits a remote command execution on HP Data Protector 8.10. Arbitrary commands can be executed by sending crafted requests with opcode 28 to the OmniInet service listening on the TCP/5555 port. Since there is a strict length limitation on the command,

CVSS scores for CVE-2014-2623

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
10.0
 HIGH AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
 NIST

References for CVE-2014-2623

Products affected by CVE-2014-2623

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close