CVE-2018-21033

published 2020-02-14

CVE-2018-21033: A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to…

Priority P3 38 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
hitachi	automation_director	< 8.6.2-00	8.6.2-00
hitachi	compute_systems_manager	< 8.6.2-00	8.6.2-00
hitachi	device_manager	< 8.6.2-00	8.6.2-00
hitachi	global_link_manager	< 8.6.2-00	8.6.2-00
hitachi	infrastructure_analytics_advisor	< 4.2.0-00	4.2.0-00
hitachi	replication_manager	< 8.6.2-00	8.6.2-00
hitachi	tiered_storage_manager	< 8.6.2-00	8.6.2-00
hitachi	tuning_manager	< 8.6.2-00	8.6.2-00

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvd v3.0 5.0 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20