CVE-2013-2347
HP Storage Data Protector 6.2X - Remote Code Execution via Crafted EXEC_BAR Packet
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-2347.
PoCs published by Metasploit, Chris Graham, including Metasploit module exploits/windows/misc/hp_dataprotector_exec_bar.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-2347 in HP Data Protector's Backup Client Service (OmniInet.exe) via the EXEC_BAR operation to achieve remote code execution. It supports both VBScript CMDStager and PowerShell payloads, targeting Windows systems.
Description
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
Exploits (3)
This Metasploit module exploits CVE-2013-2347 in HP Data Protector's Backup Client Service (OmniInet.exe) via the EXEC_BAR operation to achieve remote code execution. It supports both VBScript CMDStager and PowerShell payloads, targeting Windows systems.
This exploit targets HP Data Protector's omniinet service (port 5555) via a malicious EXEC_BAR packet (opcode 11) to achieve remote command execution. It creates a new Windows administrator account by leveraging the service's argument parser to pass commands to CreateProcessW.
This Metasploit module exploits a remote code execution vulnerability in HP Data Protector's Backup Client Service (OmniInet.exe) via the EXEC_BAR operation. It supports both VBScript and PowerShell payload delivery methods, targeting Windows systems.