CVE-2013-2335: HP Storage Data Protector remote code execution flaw

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

critical priorityCVSS 2.0 score of 10 with network reachability, no authentication and full confidentiality, integrity and availability impact, combined with a very high EPSS percentile, warrants critical priority despite the thin technical detail.

What it is

CVE-2013-2335 is an unspecified vulnerability in HP Storage Data Protector versions 6.20, 6.21, 7.00 and 7.01 that allows remote attackers to execute arbitrary code through unknown vectors. The record gives no root cause, no affected component and no technical detail beyond the ZDI identifier, so the exact flaw cannot be described from the supplied facts.

Impact

A successful attack lets a remote, unauthenticated attacker run arbitrary code on the Data Protector host, which typically holds backup credentials and access to protected systems. That makes full compromise of the backup infrastructure possible.

Attack surface

The CVSS 2.0 vector AV:N/AC:L/Au:N/C:C/I:C/A:C indicates the flaw is reachable over the network with no authentication and no user interaction. The specific service or port is not stated in the record.

Exploitation

The record is not listed in CISA KEV and documents no ransomware use, but EPSS is 0.61043 (99.1st percentile), indicating a high modeled likelihood of exploitation activity. No public exploit or in-the-wild confirmation is provided by the references, which are vendor advisories only.

What to do

• Apply the HP vendor advisory fix for the affected Data Protector versions (6.20, 6.21, 7.00, 7.01) as the first action.
• If patching cannot be done immediately, restrict network access to Data Protector services to trusted management hosts only.
• Segment backup infrastructure from general user and internet-facing networks.
• Review and rotate credentials stored or managed by Data Protector in case of prior compromise.
• Monitor vendor channels for updated advisories since the root cause is unspecified.

Detection

• Monitor Data Protector service logs for unexpected process execution or crashes on backup servers.
• Alert on anomalous inbound connections to Data Protector hosts from untrusted network ranges.
• Baseline and watch for new or unusual child processes spawned by Data Protector services.
• Correlate backup server activity with authentication and file access logs for signs of lateral movement.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.