Hitachi Energy APM Edge
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0492US | high7.8OT critical | KEV | ||
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the… | ||||
| CVE-2021-4034US | high7.8OT critical | KEV | ||
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-270-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationLumada APM Edge
APM should only be used to access the internet for authorized information. Portable computers and removable storage media should be carefully scanned for viruses before connecting to a control system.
- MitigationLumada APM Edge
APM should only be used to access the internet for authorized information. Portable computers and removable storage media should be carefully scanned for viruses before connecting to a control system.
- FixedLumada APM Edge
When applicable, Hitachi Energy recommends users update to Lumada APM Edge v6.3 at the earliest convenience.
- FixedLumada APM Edge
When applicable, Hitachi Energy recommends users update to Lumada APM Edge v6.3 at the earliest convenience.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan