Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-5684
PUBLISHED
More InfoOfficial Page
Assigner-jpcert
Assigner Org ID-ede6fdc4-6654-4307-a26d-3331c018e2ce
View Known Exploited Vulnerability (KEV) details
Published At-24 Dec, 2020 | 01:20
Updated At-04 Aug, 2024 | 08:39
Rejected At-
▼CVE Numbering Authority (CNA)

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.

Affected Products
Vendor
NEC CorporationNEC Corporation
Product
Management software for NEC Storage disk array system
Versions
Affected
  • iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express
Problem Types
TypeCWE IDDescription
textN/AImproper server certificate verification
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://jpn.nec.com/security-info/secinfo/nv20-015.html
x_refsource_MISC
https://jvn.jp/en/jp/JVN10100024/index.html
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://jpn.nec.com/security-info/secinfo/nv20-015.html
x_refsource_MISC
x_transferred
https://jvn.jp/en/jp/JVN10100024/index.html
x_refsource_MISC
x_transferred
Details not found