VulnerabilityModified
CVE-2013-0706
NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors.
HIGH 9.0EPSS 1.75%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:C
- EPSS
- 1.75% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- nec/universal raid utility
- Source
- vultures@jpcert.or.jp
References
- http://jpn.nec.com/security-info/secinfo/nv13-004.htmlVendor Advisory
- http://jvn.jp/en/jp/JVN75585394/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012Vendor Advisory
- http://jpn.nec.com/security-info/secinfo/nv13-004.htmlVendor Advisory
- http://jvn.jp/en/jp/JVN75585394/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.