Summary
HP D2D/StorOnce Storage Units are prone to a security-bypass vulnerability.
The HP D2D/StorOnce Storage Units contains a backdoor. SSH access is all that's required to remotely compromise HP StoreOnce backup systems. Entering the user name 'HPSupport' and the password 'badg3r5' causes the system to open an undocumented administrator account.
References
Updated on 2015-03-25
Severity
Classification
-
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Multiple Barracuda Products Security Bypass and Backdoor Unauthorized Access Vulnerabilities
- Schneider Electric Quantum Ethernet Module Hardcoded Credentials Authentication Bypass Vulnerability
- OpenMediaVault Default Admin Credentials
- CS121 UPS Default Admin Credentials
- SSH Brute Force Logins with default Credentials