CVE-2023-34143

MediumCVSS 5.6

Published: 18/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

CVE-2023-34143 describes an improper validation of certificate with host mismatch vulnerability in Hitachi Device Manager on Windows and Linux. This allows for a Man in the Middle attack, potentially leading to data interception.

Risk Assessment

Organizations using Hitachi Device Manager prior to version 8.8.5-02 are at risk of attacks that could result in loss of data confidentiality and integrity of communications.

Recommendation

It is recommended to update Hitachi Device Manager to version 8.8.5-02 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02.