CVE-2021-20740

🗓️ 28 Jun 2021 00:50:31Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 80 Views

Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway versions allow remote attackers to execute arbitrary OS commands with root privileges

Reporter	Title	Published	Views	Family All 9
CNNVD	Hitachi Virtual File Platform 操作系统命令注入漏洞	18 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-20740	28 Jun 202100:50	–	cvelist
EUVD	EUVD-2021-8154	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#21298724: Hitachi Virtual File Platform vulnerable to OS command injection	18 Jun 202100:00	–	jvn
Japan Vulnerability Notes	Hitachi Virtual File Platform vulnerable to OS command injection	18 Jun 202106:45	–	jvn
NVD	CVE-2021-20740	28 Jun 202101:15	–	nvd
OSV	CVE-2021-20740	28 Jun 202101:15	–	osv
Prion	Design/Logic Flaw	28 Jun 202101:15	–	prion
RedhatCVE	CVE-2021-20740	22 May 202520:59	–	redhatcve

NVD

Node

hitachi virtual_file_platformRange<6.4.3-09

Node

hitachi virtual_file_platformRange<5.5.3-09

Node

nec nas_gateway_nh4a_firmwareRange<fos_5.5.3-08(nec2.5.4a)

AND

nec nas_gateway_nh4aMatch-

Node

nec nas_gateway_nh8a_firmwareRange<fos_5.5.3-08(nec2.5.4a)

AND

nec nas_gateway_nh8aMatch-

Node

nec nas_gateway_nh4b_firmwareRange<fos_6.4.3-08(nec3.4.2)

AND

nec nas_gateway_nh4bMatch-

Node

nec nas_gateway_nh8b_firmwareRange<fos_6.4.3-08(nec3.4.2)

AND

nec nas_gateway_nh8bMatch-

Node

nec nas_gateway_nh4c_firmwareRange<fos_6.4.3-08(nec3.4.2)

AND

nec nas_gateway_nh4cMatch-

Node

nec nas_gateway_nh8c_firmwareRange<fos_6.4.3-08(nec3.4.2)

AND

nec nas_gateway_nh8cMatch-

[
  {
    "product": "Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform",
    "vendor": "Hitachi and NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2)"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN21298724/index.html
jpn	www.jpn.nec.com/security-info/secinfo/nv21-011.html
hitachi	www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2021/2021_306.html

21 Nov 2024 05:47Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

CVSS 29

EPSS0.02367

CWE-78