Lucene search

K
nvd[email protected]NVD:CVE-2023-34143
HistoryJul 18, 2023 - 3:15 a.m.

CVE-2023-34143

2023-07-1803:15:55
CWE-297
CWE-295
web.nvd.nist.gov
hitachi device manager
host mismatch
man in the middle attack
windows
linux
cve-2023-34143
vulnerability

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

30.7%

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02.

Affected configurations

NVD
Node
hitachidevice_managerRange<8.8.5-02
AND
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

30.7%

Related for NVD:CVE-2023-34143