Remote Command Execution Vulnerability in Hitachi and NEC Storage Solutions
CVE-2021-20740

8.8HIGH

Key Information:

Vendor: Hitachi And Nec Corporation
Status: Hitachi Virtual File Platform And Nec Storage M Series Nas Gateway Which Uses Hitachi Virtual File Platform
Vendor: CVE Published:; 28 June 2021

Summary

A vulnerability exists in Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway, allowing remote authenticated attackers to execute arbitrary OS commands with root privileges. This issue affects specific versions of these products and arises from unspecified vectors, potentially leading to severe security implications. Users are advised to upgrade to the latest versions to mitigate this risk. For more information, refer to the official security advisories.

Affected Version(s)

Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2)