CVE-2023-34142 Cleartext Transmission Vulnerability in Hitachi Device Manager

Critical 9.0 Published 18 Jul 2023 Updated 28 Oct 2024

Attackers can intercept sensitive information transmitted in cleartext by Hitachi Device Manager components, requiring an upgrade to secure communications.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-34142?

CVE-2023-34142 is a critical vulnerability in Hitachi Device Manager, published on 18 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02.

Weakness: CWE-319

Which versions are affected by CVE-2023-34142?

It affects 1 product.

Products include Hitachi Device Manager.

How do I fix CVE-2023-34142?

No fix has been published for CVE-2023-34142 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-34142 being exploited?

There is no known exploitation of CVE-2023-34142 in the wild and no public exploit code.

Sources

Also known as GHSA-x7ww-xhxw-m928.