CVE-2012-4362

This Metasploit module exploits a command injection vulnerability in HP StorageWorks P4000 Virtual SAN Appliance by leveraging default credentials to inject arbitrary commands via a crafted ping request on port 13838.

This exploit targets a command injection vulnerability in HP VSA/SANiQ Hydra client (CVE-2012-4362). It sends a crafted packet to execute arbitrary commands via a backdoor login and a command injection in the ping functionality, resulting in a reverse shell.