PT-2023-8826 · Hitachi · Hitachi Ops Center Common Services

Published 2023-10-02 · Updated 2023-10-04 · CVE-2023-3967

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center Common Services versions prior to 10.9.3-00

Description The issue is related to an uncontrolled allocation of resources, which can be exploited by a remote attacker to cause a denial of service. This can lead to a disruption in service.

Recommendations For versions prior to 10.9.3-00, update to version 10.9.3-00 or later to resolve the issue. As a temporary workaround, consider implementing resource limits or throttling to minimize the risk of exploitation. Restrict access to the vulnerable service to minimize the risk of denial of service attacks.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2024-02096

CVE-2023-3967

Affected Products

Hitachi Ops Center Common Services

References · 7

• https://osv.dev/vulnerability/CVE-2023-3967 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02096 · Security Note
• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-142/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3967 · Security Note
• https://t.me/cvenotify/59006 · Telegram Post
• https://twitter.com/CVEnew/status/1709025805567762927 · Twitter Post
• https://t.me/cibsecurity/71459 · Telegram Post