Details of VAR-201608-0489

ID

VAR-201608-0489

TITLE

Unknown vulnerabilities in multiple Hitachi products

Trust: 0.6

sources: CNVD: CNVD-2016-06872

DESCRIPTION

Hitachi Device Manager is a set of mobile device management software; Replication Manager is a set of data replication software that simplifies Hitachi storage systems. Multiple Hitachi products have security vulnerabilities that allow attackers to use this vulnerability to obtain sensitive information or launch further attacks

Trust: 0.81

sources: CNVD: CNVD-2016-06872 // BID: 91803

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2016-06872

AFFECTED PRODUCTS

vendor:	hitachi	model:	replication manager software )	scope:	eq	version:	7.3-00	Trust: 0.9
vendor:	hitachi	model:	device manager software )	scope:	eq	version:	7.4-00	Trust: 0.9
vendor:	hitachi	model:	device manager software -00 )	scope:	eq	version:	7.3	Trust: 0.9
vendor:	hitachi	model:	replication manager	scope:	-	version:	-	Trust: 0.6
vendor:	hitachi	model:	device manager software	scope:	-	version:	-	Trust: 0.6
vendor:	hitachi	model:	replication manager software )	scope:	eq	version:	6.2-00	Trust: 0.6
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.0.0-00	Trust: 0.6
vendor:	hitachi	model:	replication manager software -00 )	scope:	eq	version:	7.3	Trust: 0.3
vendor:	hitachi	model:	replication manager software	scope:	eq	version:	6.2-00	Trust: 0.3
vendor:	hitachi	model:	replication manager software	scope:	eq	version:	7.3.0-00	Trust: 0.3
vendor:	hitachi	model:	replication manager software	scope:	eq	version:	7.0.1-01	Trust: 0.3
vendor:	hitachi	model:	replication manager software (linux(sles	scope:	eq	version:	7.0.1-01	Trust: 0.3
vendor:	hitachi	model:	replication manager software (linux(rhel	scope:	eq	version:	7.0.1-01	Trust: 0.3
vendor:	hitachi	model:	replication manager software (linux(sles	scope:	eq	version:	7.0.0-00	Trust: 0.3
vendor:	hitachi	model:	replication manager software (linux(rhel	scope:	eq	version:	7.0.0-00	Trust: 0.3
vendor:	hitachi	model:	replication manager	scope:	eq	version:	8.0.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.4-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.3-00	Trust: 0.3
vendor:	hitachi	model:	device manager software )	scope:	eq	version:	7.3-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.6.1-05	Trust: 0.3
vendor:	hitachi	model:	device manager software (solaris(x6	scope:	eq	version:	7.6.1-05	Trust: 0.3
vendor:	hitachi	model:	device manager software (solaris(sp	scope:	eq	version:	7.6.1-05	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(suse	scope:	eq	version:	7.6.1-05	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(rhel	scope:	eq	version:	7.6.1-05	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.5.0-02	Trust: 0.3
vendor:	hitachi	model:	device manager software (solaris(op	scope:	eq	version:	7.4.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.3.1	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.2.1-01	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.2.1-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.1.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software (solaris(sp	scope:	eq	version:	7.1.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(sles	scope:	eq	version:	7.1.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(rhel	scope:	eq	version:	7.1.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software	scope:	eq	version:	7.0.1-02	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(sles	scope:	eq	version:	7.0.1-02	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(rhel	scope:	eq	version:	7.0.1-02	Trust: 0.3
vendor:	hitachi	model:	device manager software (solaris(sp	scope:	eq	version:	7.0.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(sles	scope:	eq	version:	7.0.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager software (linux(rhel	scope:	eq	version:	7.0.0-00	Trust: 0.3
vendor:	hitachi	model:	device manager	scope:	eq	version:	8.0.0-00	Trust: 0.3
vendor:	hitachi	model:	replication manager	scope:	ne	version:	8.4.1-02	Trust: 0.3
vendor:	hitachi	model:	device manager	scope:	ne	version:	8.4.1-02	Trust: 0.3

sources: CNVD: CNVD-2016-06872 // BID: 91803

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-06872
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2016-06872
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2016-06872

THREAT TYPE

network

Trust: 0.3

sources: BID: 91803

TYPE

Input Validation Error

Trust: 0.3

sources: BID: 91803

PATCH

title:

Patch for Unknown vulnerabilities in multiple Hitachi products

url:

https://www.cnvd.org.cn/patchinfo/show/80859

Trust: 0.6

sources: CNVD: CNVD-2016-06872

EXTERNAL IDS

db:	BID	id:	91803	Trust: 0.9
db:	CNVD	id:	CNVD-2016-06872	Trust: 0.6
db:	HITACHI	id:	HS16-017	Trust: 0.3

sources: CNVD: CNVD-2016-06872 // BID: 91803

REFERENCES

url:	http://www.securityfocus.com/bid/91803	Trust: 0.6
url:	http://www.hds.com/products/storage-software/hitachi-device-manager.html	Trust: 0.3
url:	http://www.hitachi.com/index.html	Trust: 0.3
url:	http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs16-017/index.html	Trust: 0.3

sources: CNVD: CNVD-2016-06872 // BID: 91803

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 91803

SOURCES

db:	CNVD	id:	CNVD-2016-06872
db:	BID	id:	91803

LAST UPDATE DATE

2022-05-17T02:07:07.174000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-06872	date:	2016-08-29T00:00:00
db:	BID	id:	91803	date:	2016-07-11T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-06872	date:	2016-08-30T00:00:00
db:	BID	id:	91803	date:	2016-07-11T00:00:00