Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of Hitachi Vantara NAS network storage systems, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

🗓️ 22 Dec 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Hitachi Vantara NAS systems have authentication flaws that let remote attackers access protected data

Related
Detection
Refs
ReporterTitlePublishedViews
Family
0day.today		Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 IDOR Exploit
11 Mar 202400:00
–zdt
GithubExploit		Exploit for Improper Authorization in Hitachi System_Management_Unit_Firmware
18 Dec 202309:29
–githubexploit
GithubExploit		Exploit for Improper Authentication in Hitachi Vantara_Hitachi_Network_Attached_Storage
18 Dec 202309:24
–githubexploit
Circl		CVE-2023-5808
20 Dec 202315:44
–circl
CNNVD		Hitachi Vantara HNAS Authorization Issues Vulnerability
4 Dec 202300:00
–cnnvd
CVE		CVE-2023-5808
4 Dec 202323:53
–cve
Cvelist		CVE-2023-5808 System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.
4 Dec 202323:53
–cvelist
Exploit DB		Hitachi NAS (HNAS) System Management Unit (SMU) Backup &amp; Restore &lt; 14.8.7825.01 - IDOR
11 Mar 202400:00
–exploitdb
EUVD		EUVD-2023-58091
3 Oct 202520:07
–euvd
NVD		CVE-2023-5808
5 Dec 202300:15
–nvd
Rows per page
Vulners
Node
hitachi,system_management_unit_(smu)Range6.0–14.8.7825.01

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Dec 2023 00:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 36.5
CVSS 27.8
EPSS0.00293
Hitachi Vantara NASAuthentication flawsRemote attackersUnauthorized accessProtected data
1