High severity · published Jul 18, 2023
CVE-2023-34142
Cleartext Transmission Vulnerability in Hitachi Device Manager
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HD
Hitachi Device Manager · Hitachi
before 8.8.5-02 · source: vendor
DM
Device Manager · Hitachi
before 8.8.5-02 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-34142
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-34142
Vendor Advisory
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html
More from Hitachi Device Manager
8.1
CVE-2023-34143
Improper Validation of Certificate Vulnerability in Hitachi Device Manager
7.8
CVE-2020-36695
File and Directory Permission Vulnerability in Hitachi Command Suite
7.5
CVE-2023-49107
Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager
7.5
CVE-2023-49106
Missing Password Field Masking Vulnerability in Hitachi Device Manager
6.7
CVE-2024-5963
An unquoted executable path exists in Hitachi Device Manager