A serious vulnerability in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer applications, with CVE-2024-10205 and a CVSS score of 9.4 (high).
This vulnerability allows authentication to be bypassed, providing unauthorized remote access. This could lead to sensitive data exposure, compromise , and service disruption, creating serious security risks.
Read more: Hackers exploit vulnerability in Apple Safari
Affected products:
- Hitachi Ops Center Analyzer (Linux x64): Versions 10.0.0-00 to 11.0.3-00.
- Hitachi Infrastructure Analytics Advisor (Linux x64): Versions 2.1.0-00 to 4.4.0-00.
Corrected versions:
- Ops Center Analyzer: Version 11.0.3-00.
- Infrastructure Analytics Advisor: Contact Hitachi support.
See also: Hackers exploit vulnerability in file transfer tools for mass attacks
Currently, there are no workarounds available to address this vulnerability, making upgrading to the stable version the only effective approach to protecting affected systems.
Organizations using the affected products should prioritize updating their systems to stable releases as a matter of urgency. Alternatively, they can contact Hitachi support services for customized solutions. Until the vulnerability is resolved, systems remain exposed to potentially serious cyberattacks.
This development highlights the critical importance of regularly updating software and monitoring for security guidance. Organizations must promptly assess their environment and implement corrective measures to mitigate the associated risks.
Read more: Atlassian Confluence vulnerability used for crypto-mining attacks
Stay tuned for further updates and contact Hitachi for additional technical support. Cybersecurity remains a top priority, and taking proactive measures is essential to address vulnerabilities such as CVE-2024-10205.
Source: gbhackers
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
