Vulnerability · Published Feb 28, 2023 · Assigned by Hitachi

CVE-2022-4895Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

High 8.6

In plain English

A high-severity improper certificate validation in Hitachi Infrastructure Analytics Advisor from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)0.3%top 79.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.

Affected products (as reported)

Vendor	Product	Versions
Hitachi	Hitachi Infrastructure Analytics Advisor	2.0.0-00 – through 4.4.0-00
Hitachi	Hitachi Ops Center Analyzer	10.0.0-00 – before 10.9.1-00

Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html vendor-advisory