Authentication bypass Vulnerability in Hitachi Allow Attackers To Gain System Access Remotely

A severe authentication bypass vulnerability has been identified in Hitachi’s Infrastructure Analytics Advisor and Ops Center Analyzer, posing risks to users.

The flaw tracked as CVE-2024-10205, carries a CVSS 3.1 score of 9.4, categorizing it as “High” severity.

This vulnerability allows unauthorized access, potentially leading to data breaches, system compromise, and operational disruptions.

Details of the Vulnerability

The issue arises from an authorization bypass in specific components of the affected software. Exploiting this flaw does not require prior authentication, making it particularly dangerous.

Threat actors could remotely access systems, compromising their confidentiality, integrity, and availability.

This vulnerability underscores the critical need for organizations to remain vigilant against emerging cybersecurity threats.

Impacted Products and Versions

The vulnerability affects specific versions of Hitachi products running on the Linux (x64) platform:

• Hitachi Ops Center Analyzer: The impacted component is Analyzer Detail View. Affected versions range from 10.0.0-00 or later but are below 11.0.3-00.
• Hitachi Infrastructure Analytics Advisor: The affected component is Data Center Analytics. Impacted versions span from 2.1.0-00 up to 4.4.0-00.

Organizations using these products are at risk until the vulnerability is addressed through updates or patches.

Mitigation and Recommendations

Hitachi has released fixed versions to address this critical issue:

• For Ops Center Analyzer, users should upgrade to version 11.0.3-00 (Linux x64).
• For Infrastructure Analytics Advisor, users are advised to contact Hitachi support for the latest fixed version.

No workarounds are currently available, making it essential for users to apply the fixes immediately. Organizations must prioritize these updates to protect their systems from potential exploitation.

This discovery highlights the importance of maintaining up-to-date software and monitoring security advisories regularly.

Organizations should assess their environments promptly and take corrective actions to mitigate risks associated with CVE-2024-10205.

Call for Proactive Cybersecurity Measures

The identification of CVE-2024-10205 serves as a stark reminder of the ever-evolving nature of cyber threats.

Organizations are urged to adopt proactive cybersecurity measures, including regular software updates and robust monitoring systems, to safeguard their infrastructure against vulnerabilities like this one.

For further assistance or technical support, users are encouraged to contact Hitachi directly.

Staying informed and acting swiftly on security advisories is crucial in mitigating potential cyberattacks and ensuring system resilience.

Also Read: