CVE Catalog

CVE-2023-34142

CriticalCVSS 9.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

20th percentile - higher than 20% of all known CVEs

Summary

CVE-2023-34142 involves the cleartext transmission of sensitive information in Hitachi Device Manager on Windows and Linux. The issue affects Device Manager Server, Device Manager Agent, and Host Data Collector components and is present in versions before 8.8.5-02.

Risk Assessment

The transmission of sensitive data in cleartext poses a risk of interception by unauthorized parties, potentially leading to breaches of confidentiality within the organization.

Recommendation

It is recommended to update Hitachi Device Manager to version 8.8.5-02 or later to mitigate this vulnerability and ensure proper protection of transmitted data.

Original NVD description (English source)

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS