CVE-2014-2623
EXPLOITEDHP Storage Data Protector 8.x - Remote Code Execution
Title source: llmExploitation Summary
CVE-2014-2623 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, Juttikhun Khamchaiyaphum, Polunchis, including a Metasploit module exploits/windows/misc/hp_dataprotector_cmd_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2014-2623, a remote command execution vulnerability in HP Data Protector 8.10. It sends a crafted request with opcode 28 to the OmniInet service on TCP/5555, executing arbitrary commands via rundll32.exe and a fake SMB server.
Description
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Exploits (4)
This Metasploit module exploits CVE-2014-2623, a remote command execution vulnerability in HP Data Protector 8.10. It sends a crafted request with opcode 28 to the OmniInet service on TCP/5555, executing arbitrary commands via rundll32.exe and a fake SMB server.
This exploit targets a remote command execution vulnerability in HP Data Protector 8.x by sending a crafted packet to a specified port. The payload includes a command injection mechanism that leverages a buffer overflow to execute arbitrary commands on the target system.
This exploit targets HP Data Protector Manager 8.10, allowing remote command execution via a crafted packet sent to TCP port 5555. It includes functionality to either execute arbitrary commands or add a user to the Administrators group.
This Metasploit module exploits a remote command execution vulnerability in HP Data Protector 8.10 by sending a crafted request with opcode 28 to the OmniInet service on TCP/5555. It executes arbitrary commands via rundll32.exe and delivers the payload through a fake SMB server.