CVE-2020-5633
N/A
N/A
Summary
Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NEC Corporation | Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied | Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j | affected |
Weaknesses
- Authentication bypass
ADP Enrichment
CVE Program Container
Additional References
- https://jpn.nec.com/security-info/secinfo/nv21-002.html
- https://www.support.nec.co.jp/View.aspx?id=9010108754
- https://jvn.jp/en/jp/JVN38752718/index.html
References
- https://jpn.nec.com/security-info/secinfo/nv21-002.html
- https://www.support.nec.co.jp/View.aspx?id=9010108754
- https://jvn.jp/en/jp/JVN38752718/index.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.