7.2high
CVE-2022-34883
OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter
Published 4 y ago · modified 4 mo ago · JSON
CVSS
7.2
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
1.3%
percentile 70%
Public exploits
0
none known
Summary
OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker.
Exploit prediction (EPSS)
1.26% probability of exploitation in the next 30 days, higher than 70% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Hitachi RAID Manager Storage Replication Adapter
Classification
- Weakness
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
- hitachi.com /products/it/storage-solutions/sec_info/2022/2022_307.html · vendor-advisory, x_transferred
Sources
- CVE List: CVE-2022-34883
- NVD: CVE-2022-34883
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.