July 7, 2017
Hitachi, Ltd. IT Platform Products Management Division
Hitachi Data Ingestor has the following vulnerability.
Samba program used by Hitachi Data Ingester (HDI) are vulnerable to a remote code execution vulnerability (CVE-2017-7494), allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
The following table shows the affected products.
|Product Name||Affected versions||Vulnerability ID||Remark|
|Hitachi Data Ingestor||3.0.1 or later||CVE-2017-7494||-|
|Product Name||Fixed version||Release date|
|Hitachi Data Ingestor||6.2.0-03||June 9th 2017|