CVE-2021-20740

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hitachi:virtual_file_platform:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:hitachi:virtual_file_platform:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4b:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8b:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4c:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8c:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:47

Type Values Removed Values Added
References () https://jpn.nec.com/security-info/secinfo/nv21-011.html - Vendor Advisory () https://jpn.nec.com/security-info/secinfo/nv21-011.html - Vendor Advisory
References () https://jvn.jp/en/jp/JVN21298724/index.html - Third Party Advisory () https://jvn.jp/en/jp/JVN21298724/index.html - Third Party Advisory
References () https://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2021/2021_306.html - Vendor Advisory () https://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2021/2021_306.html - Vendor Advisory

Information

Published : 2021-06-28 01:15

Updated : 2024-11-21 05:47


NVD link : CVE-2021-20740

Mitre link : CVE-2021-20740

CVE.ORG link : CVE-2021-20740


JSON object : View

Products Affected

hitachi

  • virtual_file_platform

nec

  • nas_gateway_nh4a_firmware
  • nas_gateway_nh4c_firmware
  • nas_gateway_nh4a
  • nas_gateway_nh8c_firmware
  • nas_gateway_nh4b_firmware
  • nas_gateway_nh8c
  • nas_gateway_nh8b_firmware
  • nas_gateway_nh4c
  • nas_gateway_nh8b
  • nas_gateway_nh8a_firmware
  • nas_gateway_nh8a
  • nas_gateway_nh4b
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')