Hitachi Energy CoreTec Product: 2 CVEs, High 8.8
Summary
CISA reports 2 vulnerabilities in Hitachi Energy CoreTec5, CoreTec4. Weakness types: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Write-what-where Condition. Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Highest CVSS v3 score: 8.8 (High), not remotely exploitable per its CVSS vector.
At a glance
- Vendor
- Hitachi Energy
- Products
- CoreTec5, CoreTec4
- CVEs
- CVE-2026-13162, CVE-2026-43284
- Highest CVSS v3
- 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Energy
- Deployed
- Worldwide
- Vendor HQ
- Switzerland
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-13162 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 7.5 | – | No | CVE-2026-13162 |
| CVE-2026-43284 | Write-what-where Condition | 8.8 | – | No | CVE-2026-43284 |
Affected products (3)
- CoreTec5 versions 3.4.0 and prior
- CoreTec5 version 5.0.0
- CoreTec4 versions 3.4.0 and prior
Vendor fixes and mitigations (from advisory)
- Vendor Fix: Update to CoreTec5 version 5.0.0
- Vendor Fix: Upgrade to CoreTec5 version 5.0.0
- Mitigation: Follow general mitigation factors
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
- CISA advisory ICSA-26-302-03
- Machine-readable CSAF record
- https://publisher.hitachienergy.com/preview?DocumentID=8DBD000235&LanguageCode=en&Document
- https://publisher.hitachienergy.com/preview?DocumentID=8DBD000258&LanguageCode=en&Document
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.