CVE-2023-3495— Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-3495
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)
Source: NVD (National Vulnerability Database)
Vulnerability Description
** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存写
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hitachi EH-VIEW 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hitachi EH-VIEW是日本日立制作所（Hitachi）公司的一款数据可视化和分析平台，专注于帮助企业将数据转化为可操作的见解。这个平台的目标是通过可视化、分析和报告工具来帮助企业更好地理解他们的数据，从而做出更明智的决策。 Hitachi EH-VIEW存在安全漏洞，该漏洞源于允许本地攻击者在受影响的 EH-VIEW 安装上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-3495
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-3495
请登录查看更多情报信息。
- https://www.hitachi.com/hirt/hitachi-sec/2023/002.htmlvendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3495
Same Patch Batch · Hitachi · 2023-08-23 · 4 CVEs total
| CVE-2023-39986 | 7.8 HIGH | Out-of-bounds Read Vulnerability in Hitachi EH-VIEW (Designer) |
| CVE-2023-39985 | 7.8 HIGH | Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer) |
| CVE-2023-39984 | 7.8 HIGH | Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in H |
IV. Related Vulnerabilities
Same vendor: Hitachi
- CVE-2025-1978
Remote Code Execution Vulnerability in Hitachi Storage Navig - CVE-2025-2514
Improper Restriction of Excessive Authentication Attempts vu - CVE-2025-9661
OS command injection vulneravility in the management gui (ma - CVE-2025-65116
Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - CVE-2025-65115
Remote Code Execution Vulnerability in JP1/IT Desktop Manage
V. Comments for CVE-2023-3495
No comments yet