CVE-2013-2331: HP Storage Data Protector remote code execution flaw

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

critical priorityCVSS 2.0 score of 10 with network-reachable, unauthenticated remote code execution on backup infrastructure, combined with a 99th percentile EPSS score, warrants critical priority despite the thin technical detail.

What it is

CVE-2013-2331 is an unspecified vulnerability in HP Storage Data Protector versions 6.20, 6.21, 7.00 and 7.01 that allows remote attackers to execute arbitrary code through unknown vectors. The record gives no root cause, no affected component and no technical detail beyond the ZDI identifier, so defenders cannot reason about the exact entry point from this data alone.

Impact

A remote, unauthenticated attacker can execute arbitrary code on the affected Data Protector host, which typically runs with high privileges on backup infrastructure. Full compromise of confidentiality, integrity and availability is possible per the CVSS vector.

Attack surface

The CVSS 2.0 vector AV:N/AC:L/Au:N/C:C/I:C/A:C indicates the flaw is reachable over the network with no authentication and no user interaction. The specific protocol or service is not stated in the record.

Exploitation

The record is not listed in CISA KEV and contains no exploit references, but EPSS is 0.61043 (99.1st percentile), indicating a high modeled likelihood of exploitation activity. No public exploit or in-the-wild confirmation is provided by the supplied data.

What to do

• Apply the HP vendor advisory fix for the affected Data Protector versions (6.20, 6.21, 7.00, 7.01) as the first action.
• If patching cannot be done immediately, restrict network access to Data Protector services to trusted management hosts only.
• Segment backup infrastructure from general user and internet-facing networks.
• Monitor HP advisories for updated guidance since the record lacks technical detail on the vulnerable component.

Detection

• Monitor for unexpected processes or child processes spawned by Data Protector services on backup servers.
• Alert on anomalous inbound network connections to Data Protector ports from untrusted sources.
• Review Data Protector and host logs for unusual command execution or service crashes around backup operations.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.