Anyone operating a RAID array with Hitachi RAID Manager SRA should update the software. If this does not happen, attackers could target two security gaps.
If attacks are successful, it is conceivable that attackers can see credentials (CVE-2022-34882 “critical“) or run your own code (CVE-2022-34883 “high“). RAID Manager SRA 02.03.02 and 05/02/01 include security patches. Releases 01/02/04 and 02/02/00 are vulnerable, but support has ended and there are no more updates.
In a warning, the developers describe interim solutions for securing systems if the patches cannot be installed promptly.
