CVE-2024-8201 - Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer

Back Back to CVE browser

MEDIUM

Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer

Published May 16, 2025

5.4

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer (RAID Agent component).This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00.

Affected products

Vendor Hitachi Product Hitachi Ops Center Analyzer Default
unaffected
- Version
  10.8.0-00
  Status
  affected
  Constraints
  <11.0.4-00
- Version
  10.9.0-00
  Status
  affected
  Constraints
  <11.0.4-00

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hitachi

Hitachi Ops Center Analyzer

unaffected

Version	Status	Constraints
10.8.0-00	affected	<11.0.4-00
10.9.0-00	affected	<11.0.4-00

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1385

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54549
Advisory
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-116/index.html
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54549		Advisory
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-116/index.html		vendor-advisory