CVE-2010-2625 Denial of service in n/a
Attackers can cause a denial of service by triggering a shutdown and reboot in Hitachi ServerConductor Deployment Manager.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2010-2625?
CVE-2010-2625 is a high-severity denial of service vulnerability in n/a, published on 2 Jul 2010.
Official description
Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-00-/A; ServerConductor / Deployment Manager Standard Edition and Enterprise Edition 07-50 through 07-55, and 07-57 through 07-59; and JP1/ServerConductor/Deployment Manager Standard and Enterprise Edition 07-50 through 07-56-/F, 08-00 through 08-09-/E, 08-50 through 08-80-/A, 08-06 through 08-07, and 08-51 through 08-70; allows attackers to cause a denial of service (shutdown and reboot) via unknown vectors.
Which versions are affected by CVE-2010-2625?
It affects 2 products.
Products include Hitachi Jp1\/ Serverconductor \/ Deployment Manager, Hitachi Serverconductor \/ Deployment Manager.
How do I fix CVE-2010-2625?
No fix has been published for CVE-2010-2625 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2010-2625 being exploited?
There is no known exploitation of CVE-2010-2625 in the wild and no public exploit code.
Sources
Also known as GHSA-rr47-f45w-r9gx.