Yutaka Kokubu

O problema afeta as permissões padrão no Hitachi JP1/Extensible SNMP Agent, permitindo a manipulação de arquivos.

The issue allows an attacker on the same network segment to execute arbitrary OS commands.

The issue allows an attacker on the same network segment to login to the administrator's settings screen and change the configuration or execute arbitrary OS commands due to the use of hard-coded credentials.

The issue allows an attacker on the same network segment to bypass access restrictions, potentially accessing information and files stored on the affected device.

The issue concerns the use of hardcoded credentials in the affected products, potentially allowing a remote authenticated attacker to execute arbitrary OS commands on the device.

The issue allows an attacker on the same network segment to bypass access restrictions, potentially leading to the execution of arbitrary OS commands or code, as well as information leakage or alteration, including credentials.

The issue concerns the use of hard-coded credentials in the firmware, potentially allowing attackers to perform operations on the device with administrative privileges.

The issue allows an attacker to bypass access restrictions and change the administrator account password. This is achieved via unspecified vectors, potentially allowing unauthorized access to the system.

The issue allows remote attackers to access a non-documented developer screen, enabling them to perform operations on the device with administrative privileges.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators via unspecified vectors.

The issue exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of this issue may allow a remote attacker to execute arbitrary operating system commands via unspecified vectors.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions. This can lead to unauthorized access and control of the devices.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This is a distinct issue from other known vulnerabilities.