Total 99 security vulnerabilities recorded for hitachienergy software and firmware.
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, ...
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted me...
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. T...
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site sc...
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU fra...
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site sc...
A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of ...
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about th...
The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure o...
The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the...
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint...
The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This v...
A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulne...
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploi...
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be ex...
A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If ...
A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker...
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web servic...
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web servic...
A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerabilit...
A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uplo...
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerab...
A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on ...
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Arch...