CVE-2021-20740

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hitachi:virtual_file_platform:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:hitachi:virtual_file_platform:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4b:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8b:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh4c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh4c:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:nec:nas_gateway_nh8c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nec:nas_gateway_nh8c:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-28 01:15

Updated : 2024-02-28 18:28


NVD link : CVE-2021-20740

Mitre link : CVE-2021-20740

CVE.ORG link : CVE-2021-20740


JSON object : View

Products Affected

nec

  • nas_gateway_nh8b
  • nas_gateway_nh8c
  • nas_gateway_nh4c_firmware
  • nas_gateway_nh4a_firmware
  • nas_gateway_nh4b_firmware
  • nas_gateway_nh8a
  • nas_gateway_nh4b
  • nas_gateway_nh8c_firmware
  • nas_gateway_nh8a_firmware
  • nas_gateway_nh8b_firmware
  • nas_gateway_nh4a
  • nas_gateway_nh4c

hitachi

  • virtual_file_platform
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')