CVE-2020-5684
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-5684
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NEC ISM Client 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NEC ISM Client是美国NEC公司的一个用于管理NEC存储系统的客户端软件。 NEC ISM Client 存在信任管理问题漏洞，该漏洞源于在NEC Storage Manager或NEC Storage Manager Express上运行的NEC ISM Client容易受到不正确的服务器证书验证攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NEC Corporation | Management software for NEC Storage disk array system | iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express | - |
II. Public POCs for CVE-2020-5684
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-5684
请登录查看更多情报信息。
- https://jpn.nec.com/security-info/secinfo/nv20-015.htmlx_refsource_MISC
- https://jvn.jp/en/jp/JVN10100024/index.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-5684
IV. Related Vulnerabilities
V. Comments for CVE-2020-5684
No comments yet