PT-2013-2544 · Nec · Nec Universal Raid Utility

Published 2013-02-22 · Updated 2013-03-08 · CVE-2013-0706

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions NEC Universal RAID Utility versions 1.40 Rev 680 and earlier NEC Universal RAID Utility versions 2.31 Rev 1492 and earlier NEC Universal RAID Utility versions 2.5 Rev 2244 and earlier

Description The issue allows remote attackers to perform arbitrary RAID disk operations due to a lack of access control.

Recommendations For NEC Universal RAID Utility versions 1.40 Rev 680 and earlier, update to a version that provides access control. For NEC Universal RAID Utility versions 2.31 Rev 1492 and earlier, update to a version that provides access control. For NEC Universal RAID Utility versions 2.5 Rev 2244 and earlier, update to a version that provides access control.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-0706

Affected Products

Nec Universal Raid Utility

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-0706 · Security Note
• http://jvn.jp/en/jp/JVN75585394/index.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012 · Vendor Advisory
• http://jpn.nec.com/security-info/secinfo/nv13-004.html · Vendor Advisory