Lucene search

[email protected]CVE-2022-4146

HistoryJul 18, 2023 - 3:15 a.m.

CVE-2022-4146

2023-07-1803:15:55

CWE-917

[email protected]

web.nvd.nist.gov

cve

2022

4146

hitachi

replication manager

code injection

vulnerability

windows

linux

solaris

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replication Manager: before 8.8.5-02.

Affected configurations

NVD

Node

linuxlinux_kernelMatch-

microsoftwindowsMatch-

oraclesolarisMatch-

AND

hitachireplication_managerRange<8.8.5-02

CPENameOperatorVersion
hitachi:replication_managerhitachi replication managerlt8.8.5-02

CPE	Name	Operator	Version
hitachi:replication_manager	hitachi replication manager	lt	8.8.5-02

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "Linux",
      "Solaris"
    ],
    "product": "Hitachi Replication Manager",
    "vendor": "Hitachi",
    "versions": [
      {
        "changes": [
          {
            "at": "8.8.5-02",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.8.5-02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-123/index.html

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVE-2022-4146

cvelist1 prion1 nvd1