Skip to contentHitachienergy vulnerabilities
Newest
- hitachi energy sdm600SDM600 API permission checkCVE-2022-36864.8 Medium
- hitachi energy sdm600SDM600 endpoint vulnerabilityCVE-2022-36847.5 High
- hitachi energy sdm600SDM600 API web services authorization validationCVE-2022-36837.7 High
- hitachi energy sdm600SDM600 file permission validationCVE-2022-36829.9 Critical
- hitachi energy gms600, pwc600, reb500 +22 more +24 moreIEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy ProductsCVE-2022-33535.9 Medium
- hitachi energy lumada apm, hitachienergy lumada asset performance management +1 moreA vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role.CVE-2022-21555.7 Medium
- hitachi energy foxman-un, unem +1 moreCommunication between the client and server partially using CORBA over TCP/IPCVE-2022-39298.3 High
- hitachi energy foxman-un, unem +1 moreHardcoded credential is found in the message queueCVE-2022-39287.1 High
- hitachi energy foxman-un, unem +1 moreThe affected products store public and private key that are used to sign and protect custom parameter set files from modification.CVE-2022-39278.0 High
- hitachi energy foxman-un, unem +1 moreUse of default key for encryptionCVE-2021-403427.1 High
- hitachi energy foxman-un, unem +1 moreWeak DES encryptionCVE-2021-403417.1 High
- hitachi energy pcm600, 650 connectivity package, 670 connectivity package +8 more +10 moreCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 ProductsCVE-2022-25137.1 High
- hitachi energy microscada x sys600, microscada pro sys600 +1 moreInput Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 ProductsCVE-2022-33888.8 High
- hitachi energy microscada pro sys600, microscada x sys600 +1 moreA vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This…CVE-2022-294925.3 Medium
- hitachi energy microscada x sys600A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to st…CVE-2022-17787.5 High
- hitachi energy microscada pro sys600, microscada x sys600 +1 moreA vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-…CVE-2022-299227.5 High
- hitachi energy microscada x sys600A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-servi…CVE-2022-22777.5 High
- hitachi energy microscada x sys600A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.CVE-2022-294908.5 High
- hitachi energy msm, hitachienergy modular switchgear monitoring firmware +1 moreHTTP Response Splitting in Hitachi Energy’s MSM ProductCVE-2021-403365.0 Medium
- hitachi energy msm, hitachienergy modular switchgear monitoring firmware +1 moreCross Site Request Forgery (CSRF) in Hitachi Energy’s MSM ProductCVE-2021-403355.0 Medium
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreUser authentication bypass in TXpert Hub CoreTec 4CVE-2021-355306.0 Medium
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreRemote Code Execution in TXpert Hub CoreTec 4CVE-2021-355316.7 Medium
- hitachi energy txpert hub coretec 4 version, hitachienergy txpert hub coretec 4 firmware +1 moreFirmware upload verification bypass in TXpert Hub CoreTec 4CVE-2021-355326.7 Medium
- abb rtu500 firmware, hitachi energy rtu500 series cmu firmware +1 moreSpecially Crafted Modbus TCP Packet Vulnerability in RTU500 seriesCVE-2022-286137.5 High
- hitachi abb power grids ellipse enterprise asset management (eam), hitachienergy ellipse enterprise asset management +1 moreUser interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAMCVE-2021-274145.5 Medium
- hitachi abb power grids ellipse enterprise asset management (eam), hitachienergy ellipse enterprise asset management +1 moreCross-site scripting in Hitachi ABB Power Grids Ellipse EAMCVE-2021-274165.5 Medium
- hitachi energy fox61x, xcm20, hitachienergy fox615 firmware +1 more +3 moreWeak default credential associated with TCP port 26CVE-2021-403339.0 Critical
- hitachi energy fox61x, xcm20, hitachienergy fox615 firmware +1 more +3 moreSSH activation problem in the proprietary management protocol (port TCP 5558)CVE-2021-403348.6 High
- hitachi energy rtu500 series, hitachienergy rtu500 firmware +1 moreSpecially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 seriesCVE-2021-355337.5 High
- hitachi energy gms600, pwc600, relion 650 +8 more +10 moreInsufficient Security Control VulnerabilityCVE-2021-355347.2 High
- hitachi energy relion 670 series, relion 670/650 series, relion 670/650/sam600-io +3 more +5 moreInsufficient Security Control VulnerabilityCVE-2021-355358.1 High
- hitachi abb power grids counterparty settlement and billing (csb), retail operations, hitachienergy counterparty settlements and billing +2 moreAuthentication Bypass Vulnerability Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)CVE-2021-355287.2 High
- hitachi abb power grids counterparty settlement and billing (csb), retail operations, hitachienergy counterparty settlement and billing +2 morePassword in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)CVE-2021-355297.7 High
- hitachi abb power grids esomsPassword Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS ApplicationCVE-2021-355277.5 High
- hitachienergy esomseSOMS Report Function VulnerabilityCVE-2021-268457.5 High
- hitachienergy fox615 tego1 firmware, gms600 firmware, modular switchgear monitoring firmware +6 more +8 moreSpecially Crafted IEC 61850 Protocol Sequence VulnerabilityCVE-2021-271967.5 High
- abb microscada pro sys600ABB MicroSCADA Pro SYS600 Missing Authentication for Critical FunctionCVE-2019-5620Public exploitEPSS 70.9%9.8 Critical
- abb esomsABB eSOMS X-XSS-Protection not enabledCVE-2019-190026.3 Medium
- abb esomseSOMS X-FrameOptionCVE-2019-190016.5 Medium
- abb esomseSOMS Cachecontrol (Pragma) HTTP HeaderCVE-2019-190006.5 Medium
- abb esomsABB eSOMS: SSL medium strength Cipher SuitesCVE-2019-190975.9 Medium
- abb esomsABB eSOMS: REDIS clear text credentialsCVE-2019-190966.1 Medium
- abb esomsABB eSOMS: Stored XSS vulnerabilityCVE-2019-190955.4 Medium
- abb esomsABB eSOMS: SQL injection vulnerabilityCVE-2019-190947.6 High
- abb esomsABB eSOMS: Password complexity issueCVE-2019-190936.5 Medium
- abb esomsABB eSOMS: Viewstate without MAC SignatureCVE-2019-190923.5 Low
- abb esomsABB eSOMS: HTTP response information leakageCVE-2019-190914.3 Medium
- abb esomsABB eSOMS: Secure Flag not setCVE-2019-190903.5 Low
- abb esomseSOMS: X-Content-Type-Options Header MissingCVE-2019-190896.1 Medium
- abb esomsABB eSOMS: HTTPOnly flag not setCVE-2019-190035.3 Medium
- Show moreLoading…