PT-2013-2544 · Nec · Nec Universal Raid Utility

Publicado 2013-02-22 · Atualizado 2013-03-08 · CVE-2013-0706

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions NEC Universal RAID Utility versions 1.40 Rev 680 and earlier NEC Universal RAID Utility versions 2.31 Rev 1492 and earlier NEC Universal RAID Utility versions 2.5 Rev 2244 and earlier

Description The issue allows remote attackers to perform arbitrary RAID disk operations due to a lack of access control.

Recommendations For NEC Universal RAID Utility versions 1.40 Rev 680 and earlier, update to a version that provides access control. For NEC Universal RAID Utility versions 2.31 Rev 1492 and earlier, update to a version that provides access control. For NEC Universal RAID Utility versions 2.5 Rev 2244 and earlier, update to a version that provides access control.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-0706

Produtos afetados

Nec Universal Raid Utility

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-0706 · Nota de Segurança
• http://jvn.jp/en/jp/JVN75585394/index.html · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012 · Aviso do Fabricante
• http://jpn.nec.com/security-info/secinfo/nv13-004.html · Aviso do Fabricante