Hitachi Energy MSM Product
view advisory published 2022-08-30
Successful exploitation of this vulnerability could disrupt the functionality of the MSM web interface, steal sensitive user credentials, or cause a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-6584US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts param… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-242-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationMSM
Physically protect process control systems from unauthorized direct access.
- FixedMSM
Hitachi Energy also recommends following the hardening guidelines published by The Center for Internet Security (CIS) to protect hosts connected with MSM. This measure will prevent the lateral movement of the attack vector into MSM via such connected devices.
https://www.cisecurity.org/about-us/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan