HP Storeonce d2d vulnerabilities

2 CVEs affecting HP Storeonce d2d, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2353, published 2013-08-28.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-2353, published 2013-08-28. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP StoreOnce D2D Backup System 1.x before 1.2.19 and 2.x before 2.3.0 allows remote attackers to cause a denial of service via unknown vectors.
• CVE-2013-2342, published 2013-06-30. High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days. The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete…