CVE-2024-5963 - OpenCVE

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Hitachi	Device Manager

No data.

No data.

References

Link	Providers
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-135/index.html

History

Thu, 08 Aug 2024 16:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hitachi Hitachi device Manager
CPEs		cpe:2.3:a:hitachi:device_manager::::::::
Vendors & Products		Hitachi Hitachi device Manager
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Hitachi

Published: 2024-08-06T02:19:41.244Z

Updated: 2024-08-08T15:31:12.012Z

Reserved: 2024-06-13T11:23:28.925Z

Link: CVE-2024-5963

Vulnrichment

Updated: 2024-08-08T15:31:06.768Z

NVD

Status : Awaiting Analysis

Published: 2024-08-06T03:15:30.323

Modified: 2024-08-06T16:30:24.547

Link: CVE-2024-5963

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-5963", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "state": "PUBLISHED", "assignerShortName": "Hitachi", "dateReserved": "2024-06-13T11:23:28.925Z", "datePublished": "2024-08-06T02:19:41.244Z", "dateUpdated": "2024-08-08T15:31:12.012Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Device Manager Server"], "platforms": ["Windows"], "product": "Hitachi Device Manager", "vendor": "Hitachi", "versions": [{"changes": [{"at": "8.8.7-00", "status": "unaffected"}], "lessThan": "8.8.7-00", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).<p>This issue affects Hitachi Device Manager: before 8.8.7-00.</p>"}], "value": "Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00."}], "impacts": [{"capecId": "CAPEC-551", "descriptions": [{"lang": "en", "value": "CAPEC-551 Modify Existing Service"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-428", "description": "CWE-428 Unquoted Search Path or Element", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2024-08-06T02:19:41.244Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-135/index.html"}], "source": {"advisory": "hitachi-sec-2024-135", "discovery": "UNKNOWN"}, "title": "An unquoted executable path exists in Hitachi Device Manager", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "hitachi", "product": "device_manager", "cpes": ["cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "8.8.7-00", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-08T15:13:22.689547Z", "id": "CVE-2024-5963", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-08T15:31:12.012Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5963", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-08T15:13:22.689547Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*"], "vendor": "hitachi", "product": "device_manager", "versions": [{"status": "affected", "version": "0", "lessThan": "8.8.7-00", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-08T15:31:06.768Z"}}], "cna": {"title": "An unquoted executable path exists in Hitachi Device Manager", "source": {"advisory": "hitachi-sec-2024-135", "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-551", "descriptions": [{"lang": "en", "value": "CAPEC-551 Modify Existing Service"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi", "modules": ["Device Manager Server"], "product": "Hitachi Device Manager", "versions": [{"status": "affected", "changes": [{"at": "8.8.7-00", "status": "unaffected"}], "version": "0", "lessThan": "8.8.7-00", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-135/index.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00.", "supportingMedia": [{"type": "text/html", "value": "Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).<p>This issue affects Hitachi Device Manager: before 8.8.7-00.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-428", "description": "CWE-428 Unquoted Search Path or Element"}]}], "providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2024-08-06T02:19:41.244Z"}}}, "cveMetadata": {"cveId": "CVE-2024-5963", "state": "PUBLISHED", "dateUpdated": "2024-08-08T15:31:12.012Z", "dateReserved": "2024-06-13T11:23:28.925Z", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "datePublished": "2024-08-06T02:19:41.244Z", "assignerShortName": "Hitachi"}, "dataVersion": "5.1"}