CVE-2013-2347
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote...
CVE-2013-2347 is a high vulnerability (CVSS 10.0) in Hp Storage Data Protector, published January 4, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 66.4%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 66.4%EPSS, 99th percentile
- Exploitation
- None known3 public exploits
- Fixed in
- No fix listedNo source names one
Description
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | HP Data Protector Backup Client Service Remote Code Execution | 2014-01-02 |
| Exploit-DB | HP Data Protector - 'EXEC_BAR' Remote Command Execution | 2014-02-16 |
| Exploit-DB | HP Data Protector - Backup Client Service Remote Code Execution (Metasploit) | 2014-03-10 |
What each source reports
NVD Score used
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
- Record
CVE-2013-2347- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
- Record
CVE-2013-2347- Updated
- 2026-11-02
EUVDEUVD-2013-2293No score
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
- Record
EUVD-2013-2293- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hqq8-c3pw-gf28No score
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote...
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
- Record
GHSA-hqq8-c3pw-gf28- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exploit-db.com/exploits/32164
ddilabs.blogspot.com/2014/02/fun-with-hp-data-protector-execbar.html
zerodayinitiative.com/advisories/ZDI-14-008
h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay?docId=emr_na-c03822422
nvd.nist.gov/vuln/detail/CVE-2013-2347
github.com/advisories/GHSA-hqq8-c3pw-gf28