Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web…
Priority LOW 23CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.
Why it matters now
EPSS 0.01226 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hitachi:cosminexus_agent:03_00:*:*:*:*:*:*:* | 03_00 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_agent:03_01:*:*:*:*:*:*:* | 03_01 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_agent:03_02:*:*:*:*:*:*:* | 03_02 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_agent:03_03:*:*:*:*:*:*:* | 03_03 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_agent:03_04:*:*:*:*:*:*:* | 03_04 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_agent:03_05:*:*:*:*:*:*:* | 03_05 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_library_standard:04_00:*:*:*:*:*:*:* | 04_00 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_library_standard:04_01:*:*:*:*:*:*:* | 04_01 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_library_web:04_00:*:*:*:*:*:*:* | 04_00 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:cosminexus_library_web:04_01:*:*:*:*:*:*:* | 04_01 | Vulnerable | Hitachi |
- cpe:2.3:a:hitachi:cosminexus_agent:03_00:*:*:*:*:*:*:* Versions 03_00 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_agent:03_01:*:*:*:*:*:*:* Versions 03_01 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_agent:03_02:*:*:*:*:*:*:* Versions 03_02 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_agent:03_03:*:*:*:*:*:*:* Versions 03_03 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_agent:03_04:*:*:*:*:*:*:* Versions 03_04 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_agent:03_05:*:*:*:*:*:*:* Versions 03_05 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_library_standard:04_00:*:*:*:*:*:*:* Versions 04_00 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_library_standard:04_01:*:*:*:*:*:*:* Versions 04_01 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_library_web:04_00:*:*:*:*:*:*:* Versions 04_00 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:cosminexus_library_web:04_01:*:*:*:*:*:*:* Versions 04_01 Vulnerable ·Hitachi
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-5282
- 2026-10-03 Alias added: GHSA-g5g5-whrh-grph
References
Sources
- CVE-2007-5282 · CVE Program
- CVE-2007-5282 · NVD
- FIRST EPSS
- GHSA-g5g5-whrh-grph · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences