EIP-2015-0010

A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Disk Agent (clpdiskagent.exe) is the component that is tasked with handling shared disk resources and mirror disk control. It is configured to utilize port 29004 by default to facilitate communications between agents. This vulnerability occurs during the processing of opcode 0x104 when initializing a CPROGAGT routine within the Disk Agent. An attacker is able to introduce crafted data into the clpdiskagent component to allow for arbitrary code execution.

Vulnerability Identifiers

• Exodus Intelligence: EIP-2015-0010
• MITRE CVE: CVE-2021-20701

Vulnerability Metrics

• CVSSv2 Score: 10.0

Vendor References

• https://jpn.nec.com/security-info/secinfo/nv21-015.html
  

Discovery Credit

• Exodus Intelligence

Disclosure Timeline

• Disclosed to affected vendor: February 25th, 2021
• Disclosed to public: October 29th, 2021

Further Information

Readers of this advisory who are interested in receiving further details around the vulnerability, mitigations, detection guidance, and more can contact us at [email protected].

Researchers who are interested in monetizing their 0Day and NDay can work with us through our Research Sponsorship Program.