CVEvulnerability
CVE-2013-0706
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-264
Description
NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors.
Affected configurations
• nec universal raid utility (<= 1.40)
• nec universal raid utility (<= 2.5)
• nec universal raid utility (<= 2.31)
• nec universal raid utility 1.40
• nec universal raid utility 2.5
• nec universal raid utility 2.31
Related
Weakness · not in database (1)
References
- http://jpn.nec.com/security-info/secinfo/nv13-004.html Vendor Advisory
- http://jvn.jp/en/jp/JVN75585394/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012 Vendor Advisory
- http://jpn.nec.com/security-info/secinfo/nv13-004.html Vendor Advisory
- http://jvn.jp/en/jp/JVN75585394/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012 Vendor Advisory