Unrated severityNVD Advisory· Published Dec 24, 2020· Updated Aug 4, 2024

CVE-2020-5684

Description

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Tivoli Storage Manager Expressllm-fuzzy
SolarWinds/Storage Managerllm-fuzzy
NEC Corporation/Management software for NEC Storage disk array systemv5
Range: iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express

Patches

Vulnerability mechanics

References

jpn.nec.com/security-info/secinfo/nv20-015.htmlmitrex_refsource_MISC
jvn.jp/en/jp/JVN10100024/index.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000