Remote Command Execution Vulnerability in Hitachi and NEC Storage Solutions
CVE-2021-20740

8.8HIGH

Key Information:

Vendor: Hitachi And Nec Corporation
Status: Hitachi Virtual File Platform And Nec Storage M Series Nas Gateway Which Uses Hitachi Virtual File Platform
Vendor: CVE Published:; 28 June 2021

🔔 Create Hitachi And Nec Corporation Vulnerability Alert

What is CVE-2021-20740?

A vulnerability exists in Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway, allowing remote authenticated attackers to execute arbitrary OS commands with root privileges. This issue affects specific versions of these products and arises from unspecified vectors, potentially leading to severe security implications. Users are advised to upgrade to the latest versions to mitigate this risk. For more information, refer to the official security advisories.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2)