ICSA-22-272-02

icsaUScisa_csaf_ot

Hitachi Energy MicroSCADA Pro X SYS600

view advisory published 2022-09-29

Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-0778UShigh7.5Exploit
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi…
CVE-2020-25692UShigh7.5—
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the s…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Mitigation SYS600

    Hitachi Energy recommends following 1MRK511518 MicroSCADA X Cyber Security Deployment Guidelines.

  • Mitigation SYS600

    Hitachi Energy recommends following 1MRK511518 MicroSCADA X Cyber Security Deployment Guidelines.

  • Fixed SYS600

    For SYS600 10.x: update to at least SYS600 version 10.4.

  • Fixed SYS600

    For SYS600 10.x: update to at least SYS600 version 10.4.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan