Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-39984— Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in Hitachi EH-VIEW (KeypadDesigner)

Quick assessment

Affected
Hitachi EH-VIEW
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Hitachi EH-VIEW是日本日立制作所（Hitachi）公司的一款数据可视化和分析平台，专注于帮助企业将数据转化为可操作的见解。这个平台的目标是通过可视化、分析和报告工具来帮助企业更好地理解他们的数据，从而做出更明智的决策。 Hitachi EH-VIEW存在安全漏洞。攻击者利用该漏洞可以执行任意代码。

CVSS 7.8 · High EPSS 0.20% · P9
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-39984

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in Hitachi EH-VIEW (KeypadDesigner)
Source: CVE Program / CVE List V5
Vulnerability Description
** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Hitachi EH-VIEW 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hitachi EH-VIEW是日本日立制作所（Hitachi）公司的一款数据可视化和分析平台，专注于帮助企业将数据转化为可操作的见解。这个平台的目标是通过可视化、分析和报告工具来帮助企业更好地理解他们的数据，从而做出更明智的决策。 Hitachi EH-VIEW存在安全漏洞。攻击者利用该漏洞可以执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hitachi EH-VIEW 0 ~ * -

II. Public POCs for CVE-2023-39984

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-39984

请登录查看更多情报信息。

Other References for CVE-2023-39984 (1)

Same Patch Batch · Hitachi · 2023-08-23 · 4 CVEs total

CVE-2023-39986 7.8 HIGH Out-of-bounds Read Vulnerability in Hitachi EH-VIEW (Designer)
CVE-2023-39985 7.8 HIGH Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer)
CVE-2023-3495 7.8 HIGH Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)

IV. Related Vulnerabilities

Same product: EH-VIEW
Same vendor: Hitachi
Same weakness: CWE-125

V. Comments for CVE-2023-39984

No comments yet

Leave a comment