CVE-2022-34883 OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter
Remote authenticated users can execute arbitrary OS commands in Hitachi RAID Manager Storage Replication Adapter.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-34883?
CVE-2022-34883 is a high-severity command injection vulnerability in Hitachi RAID Manager Storage Replication Adapter, published on 6 Sep 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker.
Weakness: CWE-78
Which versions are affected by CVE-2022-34883?
It affects 1 product.
Products include Hitachi Raid Manager Storage Replication Adapter.
How do I fix CVE-2022-34883?
No fix has been published for CVE-2022-34883 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2022-34883 being exploited?
There is no known exploitation of CVE-2022-34883 in the wild and no public exploit code.
Other vulnerabilities in Hitachi RAID Manager Storage Replication Adapter
Sources
Also known as GHSA-g7j6-5rwp-hrcp.