by Kastro
Paper/Archive/CVE-2023-34142

CVE-2023-34142

Hitachi Hitachi Device Manager — Cleartext Transmission Vulnerability in Hitachi Device Manager

EPSS 0.3%CVSS 9.0
critical.is priorityof 100
33
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 27.6.276 × 205.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02.

Affected

ProductAffectedFixed inSource
Hitachi Device Manager< 8.8.5-028.8.5-02CNA
device_manager< 8.8.5-028.8.5-02CISA-ADP

Scores by source

Hitachi (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryhitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html