VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 28, 2021· Updated Aug 3, 2024

CVE-2021-20740

CVE-2021-20740

Description

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Hitachi/Virtual File Platformllm-create
    Range: <5.5.3-09 (and <6.4.3-09 for VFP)
  • NEC/Storage M Series NAS Gateway Nh4a/Nh8allm-create
    Range: <FOS 5.5.3-08(NEC2.5.4a)
  • NEC/Storage M Series NAS Gateway Nh4b/Nh8b, Nh4c/Nh8cllm-create
    Range: <FOS 6.4.3-08(NEC3.4.2)
  • Hitachi and NEC Corporation/Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platformv5
    Range: Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2)

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.