CVE-2013-0706

NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors.

Score

CVSS 2.0 9.0 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2013-02-22

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Universal Raid Utility (Nec)

References

• http://jpn.nec.com/security-info/secinfo/nv13-004.html
• http://jvn.jp/en/jp/JVN75585394/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012