CVE-2014-2623: HP Storage Data Protector 8.x remote code execution flaw

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

critical priorityThe flaw is remotely exploitable without authentication with full system impact, public exploit code exists, and EPSS probability is very high.

What it is

CVE-2014-2623 is an unspecified vulnerability in HP Storage Data Protector 8.x that allows remote attackers to execute arbitrary code. The record gives no detail on the vulnerable component or mechanism, but the CVSS 2.0 vector rates it network-reachable with no authentication and full confidentiality, integrity and availability impact. Because Data Protector is backup infrastructure, compromise can expose or destroy backed-up data.

Impact

A remote, unauthenticated attacker can execute arbitrary code on the affected Data Protector host, gaining full control of the system and the data it manages. That can lead to data theft, tampering or destruction of backups.

Attack surface

The CVSS 2.0 vector AV:N/AC:L/Au:N/C:C/I:C/A:C indicates the flaw is reachable over the network with no authentication and no user interaction. The description does not identify the specific service or port involved.

Exploitation

Public exploit code is referenced in the Exploit-DB and Packet Storm links, and EPSS gives a 30-day probability of 0.89394 (99.776th percentile), indicating high likelihood of exploitation activity. The CVE is not listed in CISA KEV.

What to do

• Apply the HP security update referenced in HP advisory emr_na-c04373818 for Storage Data Protector 8.x.
• If patching is not immediately possible, restrict network access to Data Protector services to trusted management hosts only.
• Segment backup infrastructure from general user and internet-facing networks.
• Monitor HP advisories for updated guidance, since the record does not specify affected builds or fixed versions.

Detection

• Monitor network traffic to Data Protector service ports for unexpected external or unauthorized source addresses.
• Alert on suspicious process creation or child processes spawned by Data Protector services on backup servers.
• Review Data Protector and host logs for anomalous remote connections or command execution around backup service activity.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.