6 CISA ICS advisories for Hitachi Energy in the last tracking window, 5 flagged as relevant to oil & gas. Newest first.
CISA reports 6 vulnerabilities in Hitachi Energy RTU500 series CMU Firmware. Weakness types: Missing Authentication for Critical Function, Relative Path Traversal, Missing Authorization (+2 more). Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting …
CISA reports 2 vulnerabilities in Hitachi Energy REB500. Weakness types: Uncontrolled Recursion, Allocation of Resources Without Limits or Throttling. Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to ca…
CISA reports 1 vulnerability in Hitachi Energy SOI. Weakness type: Improper Control of Generation of Code ('Code Injection'). Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry…
CISA reports 2 vulnerabilities in Hitachi Energy Asset Suite. Weakness type: Missing Authentication for Critical Function. Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cau…
CISA reports 5 vulnerabilities in Hitachi Energy FACTS Control Platform (FCP). Weakness types: Improper Neutralization of Special Elements in Data Query Logic, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Authentication Bypass by Capture-replay (+2 more). Hitachi Energy is aware of vu…
CISA reports 2 vulnerabilities in Hitachi Energy APM Edge. Weakness types: Write-what-where Condition, Out-of-bounds Write. Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on conf…
Every week: the new ICS advisories that touch oil & gas gear, what they mean, and what to do. Free.
Opens our signup page on beehiiv, where you enter your email. Unsubscribe anytime.