PT-2022-22417 · Hitachi · Hitachi Raid Manager Storage Replication Adapter

Published 2022-09-06 · Updated 2026-02-25 · CVE-2022-34883

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hitachi RAID Manager Storage Replication Adapter versions 02.01.04 through 02.03.01 on Windows Hitachi RAID Manager Storage Replication Adapter versions 02.05.00 through 02.05.00 on Windows and Docker

Description The issue allows remote authenticated users to execute arbitrary OS commands due to an OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter.

Recommendations For Hitachi RAID Manager Storage Replication Adapter versions 02.01.04 through 02.03.01 on Windows, update to version 02.03.02 or later. For Hitachi RAID Manager Storage Replication Adapter versions 02.05.00 through 02.05.00 on Windows and Docker, update to version 02.05.01 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-34883

Affected Products

Hitachi Raid Manager Storage Replication Adapter

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-34883 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34883 · Vendor Advisory
• https://hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html · Vendor Advisory
• https://t.me/cvenotify/35745 · Telegram Post
• https://t.me/cvenotify/36089 · Telegram Post
• https://t.me/cveNotify/153174 · Telegram Post