CVE-2021-20740: Hitachi Virtual File Platform

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.

Affected products

• Hitachi Virtual File Platform: before 6.4.3-09 (fixed in 6.4.3-09); before 5.5.3-09 (fixed in 5.5.3-09)
• Nec NAS Gateway NH4A Firmware: before fos_5.5.3-08\(nec2.5.4a\) (fixed in fos_5.5.3-08\(nec2.5.4a\))
• Nec NAS Gateway NH4B Firmware: before fos_6.4.3-08\(nec3.4.2\) (fixed in fos_6.4.3-08\(nec3.4.2\))
• Nec NAS Gateway NH4C Firmware: before fos_6.4.3-08\(nec3.4.2\) (fixed in fos_6.4.3-08\(nec3.4.2\))
• Nec NAS Gateway NH8A Firmware: before fos_5.5.3-08\(nec2.5.4a\) (fixed in fos_5.5.3-08\(nec2.5.4a\))
• Nec NAS Gateway NH8B Firmware: before fos_6.4.3-08\(nec3.4.2\) (fixed in fos_6.4.3-08\(nec3.4.2\))
• Nec NAS Gateway NH8C Firmware: before fos_6.4.3-08\(nec3.4.2\) (fixed in fos_6.4.3-08\(nec3.4.2\))

Published 2021-06-28. Last modified 2026-06-17.