CVE-2023-5808: Hitachi Vantara Hitachi Network Attached Storage

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that would normally be barred to that specific administrative role.

Affected products

• Hitachi Vantara Hitachi Network Attached Storage: up to and including 14.8.7825.01

Published 2023-12-05. Last modified 2026-06-17.