Not rated

CVE-2020-5684 iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not…

Description

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.

Affected products and versions

Product	Affected versions	Fixed in
Management software for NEC Storage disk array system	Versions not published

Do you use Management software for NEC Storage disk array system?

Track this CVE Watch Management software for NEC Storage disk array system Check my SBOMs

www.cveye.io/en/cve/CVE-2020-5684

Timeline

Published December 24, 2020
Last modified August 4, 2024

References

jpn.nec.com jpn.nec.com
jvn.jp jvn.jp

Track this CVE