Hitachi Energy Modular Switchgear Monitoring (MSM)
Successful exploitation of these vulnerabilities could allow an attacker to perform malicious command injection, trick a valid user into downloading malicious software onto their computer. Successful exploitation may also allow an attacker to pose as a legitimate user.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-40336US | high8.8 | — | ||
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploite… | ||||
| CVE-2021-40335US | high8.8 | — | ||
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationMSM
Ensure process control systems have no direct connections to the internet.
- MitigationMSM
Ensure process control systems have no direct connections to the internet.
- FixedMSM
Links used for access to an MSM system should not be sent by email links to MSM should not be opened. Suspicious emails should be reported to the IT administrator.
- FixedMSM
Links used for access to an MSM system should not be sent by email. Links to MSM should not be opened. Suspicious emails should be reported to the IT administrator.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan