The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Storeonce_d2d | Hp | * | 2.2.17 (including) |
| Storeonce_d2d | Hp | 2.1.01 (including) | 2.1.01 (including) |
| Storeonce_d2d | Hp | 2.2.00 (including) | 2.2.00 (including) |
| Storeonce_d2d | Hp | 2.2.10 (including) | 2.2.10 (including) |
| Storeonce_d2d | Hp | 2.2.13 (including) | 2.2.13 (including) |
| Storeonce_d2d | Hp | 2.2.14 (including) | 2.2.14 (including) |
| Storeonce_d2d | Hp | 2.2.16 (including) | 2.2.16 (including) |