Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-5808— System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.

Quick assessment

Affected
Hitachi Vantara System Management Unit (SMU)
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Hitachi Vantara HNAS是日本日立制作所（Hitachi）公司的一款企业级 NAS。用于为分布式企业和数据中心应用提供整合的 NAS 解决方案 Hitachi Vantara HNAS 14.8.7825.01版本存在授权问题漏洞，该漏洞源于存在信息泄露，允许经过身份验证的用户通过不安全直接对象引用下载敏感文件。

CVSS 7.6 · High EPSS 0.54% · P44
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-5808

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.
Source: CVE Program / CVE List V5
Vulnerability Description
SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that would normally be barred to that specific administrative role.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Hitachi Vantara HNAS 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hitachi Vantara HNAS是日本日立制作所（Hitachi）公司的一款企业级 NAS。用于为分布式企业和数据中心应用提供整合的 NAS 解决方案 Hitachi Vantara HNAS 14.8.7825.01版本存在授权问题漏洞，该漏洞源于存在信息泄露，允许经过身份验证的用户通过不安全直接对象引用下载敏感文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hitachi Vantara System Management Unit (SMU) 6.0 ~ 14.8.7825.01 -

II. Public POCs for CVE-2023-5808

# POC Description Source Link Shenlong Link
1 None https://github.com/Arszilla/CVE-2023-5808 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-5808

请登录查看更多情报信息。

Other References for CVE-2023-5808 (2)

IV. Related Vulnerabilities

Same product: System Management Unit (SMU)
Same vendor: Hitachi Vantara
Same weakness: CWE-285

V. Comments for CVE-2023-5808

No comments yet

Leave a comment