Vulnerability-Lookup

CVE-2020-5633 (GCVE-0-2020-5633)

Vulnerability from cvelistv5 – Published: 2021-01-13 09:40 – Updated: 2024-08-04 08:39

Summary

Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Authentication bypass

Assigner

jpcert jpcert root

References

3 references

URL	Tags
https://jpn.nec.com/security-info/secinfo/nv21-002.html	x_refsource_MISC
https://www.support.nec.co.jp/View.aspx?id=9010108754	x_refsource_MISC
https://jvn.jp/en/jp/JVN38752718/index.html	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
NEC Corporation	Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied	Affected: Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T08:39:25.706Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied",
          "vendor": "NEC Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-13T09:40:35.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2020-5633",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "NEC Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jpn.nec.com/security-info/secinfo/nv21-002.html",
              "refsource": "MISC",
              "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
            },
            {
              "name": "https://www.support.nec.co.jp/View.aspx?id=9010108754",
              "refsource": "MISC",
              "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN38752718/index.html",
              "refsource": "MISC",
              "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2020-5633",
    "datePublished": "2021-01-13T09:40:35.000Z",
    "dateReserved": "2020-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-04T08:39:25.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2020-5633",
      "date": "2026-09-22",
      "epss": "0.03183",
      "percentile": "0.87504"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:nec:baseboard_management_controller:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF84E0EB-8806-4A47-9936-5A5B5E4F28FC",
                    "versionEndIncluding": "1.09",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:nec:express5800\\/gt110j:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2308ECDD-EB52-4A5F-AEC9-572C997D7B6E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:nec:express5800\\/t110j:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF8BA490-25FA-404F-B448-CAD191DF3B90",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:nec:express5800\\/t110j-s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "778B7852-A0A4-4911-977E-AA2ECC768C4F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:nec:express5800\\/t110j-s_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E8C305B8-BB17-4E33-8106-07DA90AC15E3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:nec:express5800\\/t110j_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D2DFFFCA-7BC8-41D6-B169-E5337ABE6227",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:nec:istorage_ns100ti:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B0927D54-D3EA-4509-8D63-E7ECC020B4BE",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
          },
          {
            "lang": "es",
            "value": "M\u00faltiples productos NEC (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2.a generaci\u00f3n), Express5800/T110j-S (2.a generaci\u00f3n), iStorage NS100Ti y Express5800/GT110j), donde el firmware del Baseboard Management Controller (BMC) versiones Rev1.09 y anteriores es aplicado, permite a atacantes remotos omitir una autenticaci\u00f3n y luego obtener y modificar una informaci\u00f3n de configuraci\u00f3n BMC, conseguir informaci\u00f3n de monitoreo o reiniciar y apagar el producto vulnerable por medio de vectores no especificados."
          }
        ],
        "id": "CVE-2020-5633",
        "lastModified": "2024-11-21T05:34:23.630",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.0,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 8.5,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2021-01-13T10:15:14.830",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-287"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-22T16:43:08+00:00",
      "cve": "CVE-2020-5633",
      "id": "CVE-2020-5633",
      "initial_release_date": "2020-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2020-5633",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-5633.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2020-5633

Vulnerability from fkie_nvd - Published: 2021-01-13 10:15 - Updated: 2026-06-17 03:21

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
vultures@jpcert.or.jp	https://jpn.nec.com/security-info/secinfo/nv21-002.html	Vendor Advisory
vultures@jpcert.or.jp	https://jvn.jp/en/jp/JVN38752718/index.html	Third Party Advisory
vultures@jpcert.or.jp	https://www.support.nec.co.jp/View.aspx?id=9010108754	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://jpn.nec.com/security-info/secinfo/nv21-002.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://jvn.jp/en/jp/JVN38752718/index.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.support.nec.co.jp/View.aspx?id=9010108754	Vendor Advisory

Impacted products

Vendor	Product	Version
nec	baseboard_management_controller	*
nec	express5800\/gt110j	-
nec	express5800\/t110j	-
nec	express5800\/t110j-s	-
nec	express5800\/t110j-s_\(2nd-gen\)	-
nec	express5800\/t110j_\(2nd-gen\)	-
nec	istorage_ns100ti	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied",
          "vendor": "NEC Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nec:baseboard_management_controller:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF84E0EB-8806-4A47-9936-5A5B5E4F28FC",
              "versionEndIncluding": "1.09",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nec:express5800\\/gt110j:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2308ECDD-EB52-4A5F-AEC9-572C997D7B6E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nec:express5800\\/t110j:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF8BA490-25FA-404F-B448-CAD191DF3B90",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nec:express5800\\/t110j-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "778B7852-A0A4-4911-977E-AA2ECC768C4F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nec:express5800\\/t110j-s_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8C305B8-BB17-4E33-8106-07DA90AC15E3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nec:express5800\\/t110j_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2DFFFCA-7BC8-41D6-B169-E5337ABE6227",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nec:istorage_ns100ti:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0927D54-D3EA-4509-8D63-E7ECC020B4BE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples productos NEC (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2.a generaci\u00f3n), Express5800/T110j-S (2.a generaci\u00f3n), iStorage NS100Ti y Express5800/GT110j), donde el firmware del Baseboard Management Controller (BMC) versiones Rev1.09 y anteriores es aplicado, permite a atacantes remotos omitir una autenticaci\u00f3n y luego obtener y modificar una informaci\u00f3n de configuraci\u00f3n BMC, conseguir informaci\u00f3n de monitoreo o reiniciar y apagar el producto vulnerable por medio de vectores no especificados."
    }
  ],
  "id": "CVE-2020-5633",
  "lastModified": "2026-06-17T03:21:43.650",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 8.5,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-01-13T10:15:14.830",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-G89V-H54Q-6RCC

Vulnerability from github – Published: 2022-05-24 17:39 – Updated: 2022-05-24 17:39

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2020-5633"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-287"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2021-01-13T10:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.",
  "id": "GHSA-g89v-h54q-6rcc",
  "modified": "2022-05-24T17:39:00Z",
  "published": "2022-05-24T17:39:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5633"
    },
    {
      "type": "WEB",
      "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
    },
    {
      "type": "WEB",
      "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2020-5633

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2020-5633

Aliases

CVE-2020-5633

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2020-5633",
    "description": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.",
    "id": "GSD-2020-5633"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-5633"
      ],
      "details": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.",
      "id": "GSD-2020-5633",
      "modified": "2023-12-13T01:22:03.410381Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2020-5633",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "NEC Corporation"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Authentication bypass"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://jpn.nec.com/security-info/secinfo/nv21-002.html",
            "refsource": "MISC",
            "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
          },
          {
            "name": "https://www.support.nec.co.jp/View.aspx?id=9010108754",
            "refsource": "MISC",
            "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
          },
          {
            "name": "https://jvn.jp/en/jp/JVN38752718/index.html",
            "refsource": "MISC",
            "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:nec:baseboard_management_controller:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.09",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:express5800\\/gt110j:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:express5800\\/t110j:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:express5800\\/t110j-s:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:express5800\\/t110j-s_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:express5800\\/t110j_\\(2nd-gen\\):-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:nec:istorage_ns100ti:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2020-5633"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-287"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jpn.nec.com/security-info/secinfo/nv21-002.html",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://jpn.nec.com/security-info/secinfo/nv21-002.html"
            },
            {
              "name": "https://www.support.nec.co.jp/View.aspx?id=9010108754",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.support.nec.co.jp/View.aspx?id=9010108754"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN38752718/index.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://jvn.jp/en/jp/JVN38752718/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 8.5,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2021-01-21T19:00Z",
      "publishedDate": "2021-01-13T10:15Z"
    }
  }
}

JVNDB-2021-000002

Vulnerability from jvndb - Published: 2021-01-04 08:24 - Updated:2021-01-08 03:22

Severity

5.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

Multiple NEC Products vulnerable to authentication bypass

Details

In Intelligent Platform Management Interface (IPMI) v1.5, Remote Management Control Protocol (RMCP) to access BMC through LAN is prescribed. Multiple NEC products which conduct RMCP access using IPMI over LAN contain an issue in implementations of the BMC firmware and when accessing BMC through RMCP using LAN, unauthorized session may be established. NEC Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NEC Corporation coordinated under the Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN38752718/index.html
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5633
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-5633
	Improper Authentication(CWE-287)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	NEC Corporation	Express5800
	NEC Corporation	iStorage

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000002.html",
  "dc:date": "2021-01-08T12:22+09:00",
  "dcterms:issued": "2021-01-04T17:24+09:00",
  "dcterms:modified": "2021-01-08T12:22+09:00",
  "description": "In Intelligent Platform Management Interface (IPMI) v1.5, Remote Management Control Protocol (RMCP) to access BMC through LAN is prescribed. \r\n\r\nMultiple NEC products which conduct RMCP access using IPMI over LAN contain an issue in implementations of the BMC firmware and when accessing BMC through RMCP using LAN, unauthorized session may be established.\r\n\r\nNEC Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NEC Corporation coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000002.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:nec:express5800",
      "@product": "Express5800",
      "@vendor": "NEC Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:nec:istorage",
      "@product": "iStorage",
      "@vendor": "NEC Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
      "@version": "2.0"
    },
    {
      "@score": "5.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2021-000002",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN38752718/index.html",
      "@id": "JVN#38752718",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5633",
      "@id": "CVE-2020-5633",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2020-5633",
      "@id": "CVE-2020-5633",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "Multiple NEC Products vulnerable to authentication bypass"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2020-5633 (GCVE-0-2020-5633)

FKIE_CVE-2020-5633

GHSA-G89V-H54Q-6RCC

GSD-2020-5633

JVNDB-2021-000002

Tags

Sightings

Nomenclature

Related by attack behaviour