CVE-2014-2623
CVE-2014-2623 is a critical-severity vulnerability in Hp Storage Data Protector with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 89% places it in the 100th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 89% (100th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Storage Data Protector
- Published:
- Last modified:
Description
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Frequently asked questions
- What is CVE-2014-2623?
- Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
- How severe is CVE-2014-2623?
- CVE-2014-2623 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2014-2623 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 89% (100th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2014-2623?
- CVE-2014-2623 primarily affects Hp Storage Data Protector. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2014-2623?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2014-2623 published?
- CVE-2014-2623 was published on 2014-07-18 and last updated on 2026-06-17.
References
- http://packetstormsecurity.com/files/130658/HP-Data-Protector-8.10-Remote-Command-Execution.html
- http://www.exploit-db.com/exploits/34066/
- http://www.exploit-db.com/exploits/35961
- http://www.exploit-db.com/exploits/36304
- http://www.osvdb.org/109069
- http://www.securitytracker.com/id/1030583
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04373818
Affected products (8)
- cpe:2.3:a:hp:storage_data_protector:8.0:-:*:*:*:windows_7:*:*
- cpe:2.3:a:hp:storage_data_protector:8.0:-:*:*:*:windows_8:*:*
- cpe:2.3:a:hp:storage_data_protector:8.0:-:*:*:*:windows_server_2003:*:*
- cpe:2.3:a:hp:storage_data_protector:8.0:-:*:*:*:windows_server_2008:*:*
- cpe:2.3:a:hp:storage_data_protector:8.10:-:*:*:*:windows_7:*:*
- cpe:2.3:a:hp:storage_data_protector:8.10:-:*:*:*:windows_8:*:*
- cpe:2.3:a:hp:storage_data_protector:8.10:-:*:*:*:windows_server_2003:*:*
- cpe:2.3:a:hp:storage_data_protector:8.10:-:*:*:*:windows_server_2008:*:*
More vulnerabilities in Hp Storage Data Protector
- CVE-2013-6195 — Critical (CVSS 10.0): Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause…
- CVE-2013-6194 — Critical (CVSS 10.0): Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause…
- CVE-2013-2350 — Critical (CVSS 10.0): Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause…
- CVE-2013-2349 — Critical (CVSS 10.0): Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause…
- CVE-2013-2348 — Critical (CVSS 10.0): Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause…
- CVE-2013-2347 — Critical (CVSS 10.0): The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary…