CVE-2018-21032: A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose…

PriorityP420medium4.3CVSS 3.1

AVNACLPRLUINSUCLINAN

EPSS

0.87%

54.3th percentile

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hitachi	automation_director	>= 8.1.1-00 < 8.5.0-00	8.5.0-00
hitachi	automation_director	>= 8.2.0-00 < 8.5.0-00	8.5.0-00
hitachi	compute_systems_manager	< 8.7.1-00	8.7.1-00
hitachi	device_manager	>= 7.0.0-00 < 8.7.1-00	8.7.1-00

CVSS provenance

nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.