CVE-2014-2623

This Metasploit module exploits CVE-2014-2623, a remote command execution vulnerability in HP Data Protector 8.10. It sends a crafted request with opcode 28 to the OmniInet service on TCP/5555, executing arbitrary commands via rundll32.exe and a fake SMB server.

This exploit targets a remote command execution vulnerability in HP Data Protector 8.x by sending a crafted packet to a specified port. The payload includes a command injection mechanism that leverages a buffer overflow to execute arbitrary commands on the target system.

This exploit targets HP Data Protector Manager 8.10, allowing remote command execution via a crafted packet sent to TCP port 5555. It includes functionality to either execute arbitrary commands or add a user to the Administrators group.

This Metasploit module exploits a remote command execution vulnerability in HP Data Protector 8.10 by sending a crafted request with opcode 28 to the OmniInet service on TCP/5555. It executes arbitrary commands via rundll32.exe and delivers the payload through a fake SMB server.