CVE-2023-34142

EUVD-2023-38244
Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9 CRITICAL
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
HitachiCNA
9 CRITICAL
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
Affected Products (NVD)
VendorProductVersion
hitachidevice_manager
𝑥
< 8.8.5-02
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html