Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-5684

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.8%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 5.8
Products affected by CVE-2020-5684
  • Nec » Ism Server » Version: 5.1
    cpe:2.3:a:nec:ism_server:5.1
  • Nec » M120 » Version: N/A
    cpe:2.3:h:nec:m120:-
  • Nec » M12e » Version: N/A
    cpe:2.3:h:nec:m12e:-
  • Nec » M320 » Version: N/A
    cpe:2.3:h:nec:m320:-
  • Nec » M320f » Version: N/A
    cpe:2.3:h:nec:m320f:-


Contact Us

Shodan ® - All rights reserved