Back to feed
EUVD-2021-8154 · Published Jun 28, 2021
Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.
Technologies
Nec Nas Gateway Nh8BNec Nas Gateway Nh8ANec Nas Gateway Nh4ANec Nas Gateway Nh8A FirmwareNec Nas Gateway Nh4BNec Nas Gateway Nh4CNec Nas Gateway Nh4A FirmwareNec Nas Gateway Nh4C FirmwareNec Nas Gateway Nh4B FirmwareNec Nas Gateway Nh8B FirmwareHitachi Virtual File PlatformNec Nas Gateway Nh8C FirmwareNec Nas Gateway Nh8C
Weaknesses
CWE-78
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.09.0
AV:N/AC:L/Au:S/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
