Description
The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.
References
- http://www.lolware.net/hpstorage.html
- HPSBST02890 vendor-advisory