#Exodus author full

This vulnerability occurs during the processing of opcode 0x103 when initializing a CPROGAGT routine within the Disk Agent. It is configured to utilize port 29004 by default to facilitate communications between agents. The Disk Agent (clpdiskagent.exe) is the component that is tasked with handling shared disk resources and mirror disk control.

#Exodus author full

Vulnerability IdentifiersĪ stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. An attacker is able to introduce crafted data into the clpdiskagent component to allow for arbitrary code execution. This vulnerability occurs during the processing of opcode 0x104 when initializing a CPROGAGT routine within the Disk Agent.

Categories AdvisoriesĪ stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. Readers of this advisory who are interested in receiving further details around the vulnerability, mitigations, detection guidance, and more can contact us at who are interested in monetizing their 0Day and NDay can work with us through our Research Sponsorship Program.

Disclosed to public: October 29th, 2021.

Disclosed to affected vendor: February 25th, 2021.

An attacker is able to introduce crafted data into the clptrnsv service to allow for arbitrary code execution. This vulnerability occurs during the processing of opcode 0x3A when initializing a clpexescript routine within the Transaction Server. The Transaction Server (clptrnsv.exe) is a system service configured to utilize port 29002 by default to facilitate transactions such as sending and receiving licensing data. A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges.