Skip to contentHitachi Energy vulnerabilities
Newest
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is
stored in...CVE-2024-280244.1 Medium
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in the FOXMAN-UN/UNEM server / APIGateway that
if exploited allows a...CVE-2024-280226.5 Medium
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in the message queueing mechanism that if
exploited can lead to the...CVE-2024-280235.7 Medium
- hitachi energy foxman-un, unem, hitachienergy foxman un +2 moreA vulnerability exists in the FOXMAN-UN/UNEM server that affects the message
queueing mechanism...CVE-2024-280217.4 High
- hitachi energy foxman-un, unem +1 moreA heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that
if exploited will...CVE-2024-20118.6 High
- hitachi energy foxman-un, unem, hitachienergy foxman un +2 morevulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker...CVE-2024-20129.1 Critical
- hitachi energy foxman-un, unem +1 moreAn authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server /
API Gateway...CVE-2024-201310.0 Critical
- hitachi energy fox61x, xmc20 +1 moreIf exploited an attacker could traverse the file system to access
files or directories that...CVE-2024-24616.9 Medium
- hitachi energy ecst, fox61x, foxcst +3 more +5 moreAllow attackers to intercept or falsify data exchanges between the client
and the serverCVE-2024-24626.8 Medium
- hitachi energy sdm600A vulnerability exists in the web-authentication component of the SDM600. If exploited an...CVE-2024-23788.0 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu500 firmware +1 moreA vulnerability exists in the RTU500 that allows for authenticated and authorized users to...CVE-2024-26177.2 High
- hitachi energy sdm600A vulnerability exists in the too permissive HTTP response header web server settings of the...CVE-2024-23777.6 High
- hitachi energy mach scmSCM Software is a client and server application. An Authenticated System manager client can...CVE-2024-04007.5 High
- hitachi energy rtu500 series cmu firmwareA vulnerability exists in the stb-language file handling that affects the RTU500 series product...CVE-2024-15326.8 Medium
- hitachi energy rtu500 series cmu firmwareA vulnerability exists in the stb-language file handling that affects the RTU500 series product...CVE-2024-15318.2 High
- hitachi energy asset suite eam, hitachienergy asset suite +1 moreREST service authentication anomaly with “valid username/no password” credential combination for...CVE-2024-22445.3 Medium
- hitachi energy mach scm server, mach scm tools, hitachienergy modular advanced control for hvdc +2 moreAuthenticated List control client can execute the LINQ query in SCM Server to present event as...CVE-2024-20977.5 High
- hitachi energy relion 670/650/sam600-io series, hitachienergy relion 650 firmware, relion 670 firmware +1 more +3 moreA vulnerability exists in the Relion update package signature validation. A tampered update...CVE-2022-38644.5 Medium
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreA vulnerability exists in the HCI Modbus TCP function included in the product versions listed...CVE-2022-20817.5 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu500 firmware +1 moreVulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500...CVE-2023-67115.9 Medium
- hitachi energy rtu500 scripting interfaceA vulnerability exists in the component RTU500 Scripting interface. When a client connects to a...CVE-2023-1514Public exploit7.4 High
- hitachi energy rtu500, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreA vulnerability exists in the webserver that affects the
RTU500 series product versions listed...CVE-2023-57695.4 Medium
- hitachi energy rtu500 series, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreA vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions...CVE-2023-57685.9 Medium
- hitachi energy rtu500, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreA vulnerability exists in the webserver that affects the
RTU500 series product versions listed...CVE-2023-57676.0 Medium
- hitachi energy relion670, hitachienergy relion 650 firmware, relion 670 firmware +1 more +3 moreA vulnerability exists in the input validation of the GOOSE
messages where out of range values...CVE-2023-45186.5 Medium
- hitachi energy esomsPoorly constructed webap requests and URI components with special characters trigger unhandled...CVE-2023-55165.3 Medium
- hitachi energy esomsThe responses for web queries with certain parameters disclose internal path of resources. This...CVE-2023-55155.3 Medium
- hitachi energy esomsThe response messages received from the eSOMS report generation using certain parameter queries...CVE-2023-55145.3 Medium
- hitachi energy mach system software, hitachienergy modular advanced control for hvdc +1 moreAuthenticated clients can read arbitrary files on the MAIN Computer
system using the remote...CVE-2023-26222.7 Low
- hitachi energy mach system software, hitachienergy modular advanced control for hvdc +1 moreThe McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file...CVE-2023-26216.5 Medium
- hitachi energy asset suite 9, hitachienergy asset suite +1 moreA vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign...CVE-2023-48166.9 Medium
- hitachi energy rtu500 series, hitachienergy rtu500 firmware +1 moreA vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500...CVE-2022-46087.5 High
- hitachi energy rtu500 series, hitachienergy rtu500 firmware +1 moreA vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the...CVE-2022-25027.5 High
- abb txpert hub coretec 4 firmware, hitachi energy txpert hub coretec 4 +1 moreA vulnerability exists that can be exploited by an authenticated client that is connected to the...CVE-2023-26259.0 Critical
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that...CVE-2023-17114.0 Medium
- hitachi energy sdm600SDM600 software privilege levelCVE-2022-36857.5 High
- hitachi energy sdm600SDM600 API permission checkCVE-2022-36864.8 Medium
- hitachi energy sdm600SDM600 endpoint vulnerabilityCVE-2022-36847.5 High
- hitachi energy sdm600SDM600 API web services authorization validationCVE-2022-36837.7 High
- hitachi energy sdm600SDM600 file permission validationCVE-2022-36829.9 Critical
- hitachi energy gms600, pwc600, reb500 +22 more +24 moreIEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy ProductsCVE-2022-33535.9 Medium
- hitachi energy lumada apm, hitachienergy lumada asset performance management +1 moreA vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role.CVE-2022-21555.7 Medium
- hitachi energy foxman-un, unem +1 moreCommunication between the client and server partially using CORBA over TCP/IPCVE-2022-39298.3 High
- hitachi energy foxman-un, unem +1 moreHardcoded credential is found in the message queueCVE-2022-39287.1 High
- hitachi energy foxman-un, unem +1 moreThe affected products store public and private key that are used to sign and protect custom parameter set files from modification.CVE-2022-39278.0 High
- hitachi energy foxman-un, unem +1 moreUse of default key for encryptionCVE-2021-403427.1 High
- hitachi energy foxman-un, unem +1 moreWeak DES encryptionCVE-2021-403417.1 High
- hitachi energy pcm600, 650 connectivity package, 670 connectivity package +8 more +10 moreCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 ProductsCVE-2022-25137.1 High
- hitachi energy microscada x sys600, microscada pro sys600 +1 moreInput Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 ProductsCVE-2022-33888.8 High
- hitachi energy microscada pro sys600, microscada x sys600 +1 moreA vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This…CVE-2022-294925.3 Medium
- Show moreLoading…