Lucene search

K
cvelistHitachiCVELIST:CVE-2023-34143
HistoryJul 18, 2023 - 2:03 a.m.

CVE-2023-34143 Improper Validation of Certificate Vulnerability in Hitachi Device Manager

2023-07-1802:03:20
CWE-297
Hitachi
www.cve.org
cve-2023-34143
improper validation
certificate
hitachi device manager
windows
linux
man in the middle attack
device manager server
device manager agent
host data collector
vulnerability

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.7%

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Device Manager Server",
      "Device Manager Agent",
      "Host Data Collector"
    ],
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "Hitachi Device Manager",
    "vendor": "Hitachi",
    "versions": [
      {
        "changes": [
          {
            "at": "8.8.5-02",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.8.5-02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.7%

Related for CVELIST:CVE-2023-34143