What is CVE-2024-21840?

CVE-2024-21840 is a high-severity vulnerability in Hitachi Storage Plug-In For VMware Vcenter, classified under Incorrect Default Permissions. CVSS score: 7.9/10. Published 2024-01-30.

How severe is CVE-2024-21840?

High severity. CVSS v3 base score is 7.9 out of 10.

Vulnerability in Hitachi Storage Plug-In For VMware Vcenter

CVE-2024-21840

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific files. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.0.0 through 04.9.2.

EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.9 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L.

Affected products

Hitachi Storage Plug-in For Vmware Vcenter — versions 04.0.0
Hitachi Storage_plug-in

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

hirt@hitachi.co.jp (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-21840?: CVE-2024-21840 is a high-severity vulnerability in Hitachi Storage Plug-In For VMware Vcenter, classified under Incorrect Default Permissions. CVSS score: 7.9/10. Published 2024-01-30.
How severe is CVE-2024-21840?: High severity. CVSS v3 base score is 7.9 out of 10.