by Kastro
Paper/Archive/CVE-2020-5633

CVE-2020-5633

NEC Corporation Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied — Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100…

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.2.882 × 2017.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.

Affected

ProductAffectedFixed inSource
Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is appliedExpress5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refjpn.nec.com/security-info/secinfo/nv21-002.htmlrefsupport.nec.co.jp/View.aspx?id=9010108754refjvn.jp/en/jp/JVN38752718/index.html