CVE-2013-2342

Severity: high (CVSS 7.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-30 · updated 2026-06-16
Weakness: CWE-255

Description

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.

Affected products

HP Storeonce D2D: through 2.2.17; 2.1.01, 2.2.00, 2.2.10, 2.2.13, 2.2.14, 2.2.16

References

http://www.lolware.net/hpstorage.html
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919
http://www.lolware.net/hpstorage.html
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919

Get alerted when CVE-2013-2342 or the next vulnerability affects your stack