CVE-2011-5217

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-25 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors.

Affected products

Hitachi Jp1/Serverconductor/Deploymentmanager: through 08-07; through 08-50-\/b; 08-06, 07-52, 07-56, 07-56-/g(*2), 08-00
Hitachi Serverconductor/Deploymentmanager: through 06-00-\/a; 01-00, 01-01, 06-00

References

http://osvdb.org/77739
http://secunia.com/advisories/47221
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-026/index.html
http://www.securitytracker.com/id?1026427
https://exchange.xforce.ibmcloud.com/vulnerabilities/71832
http://osvdb.org/77739
http://secunia.com/advisories/47221
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-026/index.html
http://www.securitytracker.com/id?1026427
https://exchange.xforce.ibmcloud.com/vulnerabilities/71832

Get alerted when CVE-2011-5217 or the next vulnerability affects your stack