Design/Logic Flaw

2021-06-2801:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.

CPENameOperatorVersion
virtual_file_platformeq< 6.4.3-9
virtual_file_platformeq< 5.5.3-9
nas_gateway_nh4a_firmwareeq< fos5.5.38nec2.5.4a
nas_gateway_nh4b_firmwareeq< fos6.4.38nec3.4.2
nas_gateway_nh4c_firmwareeq< fos6.4.38nec3.4.2
nas_gateway_nh8a_firmwareeq< fos5.5.38nec2.5.4a
nas_gateway_nh8b_firmwareeq< fos6.4.38nec3.4.2
nas_gateway_nh8c_firmwareeq< fos6.4.38nec3.4.2

Name	Operator	Version
virtual_file_platform	eq	< 6.4.3-9
virtual_file_platform	eq	< 5.5.3-9
nas_gateway_nh4a_firmware	eq	< fos5.5.38nec2.5.4a
nas_gateway_nh4b_firmware	eq	< fos6.4.38nec3.4.2
nas_gateway_nh4c_firmware	eq	< fos6.4.38nec3.4.2
nas_gateway_nh8a_firmware	eq	< fos5.5.38nec2.5.4a
nas_gateway_nh8b_firmware	eq	< fos6.4.38nec3.4.2
nas_gateway_nh8c_firmware	eq	< fos6.4.38nec3.4.2