CVE-2026-3314
Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).
This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-549
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-3314",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-3314",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-05-26T12:21:39.028766Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "hirt@hitachi.co.jp",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.6,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "hirt@hitachi.co.jp",
"affectedData": [
{
"vendor": "Hitachi",
"modules": [
"Hitachi Ops Center Analyzer detail view",
"Hitachi Ops Center Analyzer probe"
],
"product": "Hitachi Ops Center Analyzer",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "11.0.8-00",
"status": "unaffected"
}
],
"version": "10.0.0-00",
"lessThan": "11.0.8-00",
"versionType": "custom"
}
],
"platforms": [
"Linux",
"64 bit"
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "Hitachi Ops Center Analyzer viewpoint",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "11.0.8-00",
"status": "unaffected"
}
],
"version": "10.8.1-00",
"lessThan": "11.0.8-00",
"versionType": "custom"
}
],
"platforms": [
"Linux",
"64 bit"
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"modules": [
"Data Center Analytics",
"Analytics probe"
],
"product": "Hitachi Infrastructure Analytics Advisor",
"versions": [
{
"status": "affected",
"version": "3.2.0-00",
"lessThan": "11.0.8-00",
"versionType": "custom"
}
],
"platforms": [
"Linux",
"64 bit"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-05-26T07:16:18.807",
"references": [
{
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-120/index.html",
"source": "hirt@hitachi.co.jp"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "hirt@hitachi.co.jp",
"description": [
{
"lang": "en",
"value": "CWE-549"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Data Center Analytics, Analytics probe modules).\n\nThis issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: from 10.8.1-00 before 11.0.8-00; Hitachi Infrastructure Analytics Advisor: from 3.2.0-00 before 11.0.8-00."
},
{
"lang": "es",
"value": "Vulnerabilidad por falta de enmascaramiento del campo de contraseña en Hitachi Ops Center Analyzer (vista de detalles de Hitachi Ops Center Analyzer, módulos de sonda de Hitachi Ops Center Analyzer), Hitachi Ops Center Analyzer viewpoint, Hitachi Infrastructure Analytics Advisor (Análisis de centros de datos, módulos de sonda de análisis).\n\nEste problema afecta a Hitachi Ops Center Analyzer: desde 10.0.0-00 antes de 11.0.8-00; Hitachi Ops Center Analyzer viewpoint: desde 10.8.1-00 antes de 11.0.8-00; Hitachi Infrastructure Analytics Advisor: desde 3.2.0-00 antes de 11.0.8-00."
}
],
"lastModified": "2026-07-24T11:10:00.170",
"sourceIdentifier": "hirt@hitachi.co.jp"
}