ICSA-22-286-05

icsaUScisa_csaf_ot

Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service

view advisory published 2022-10-13

Successful exploitation of these vulnerabilities could crash the Prognostic Model Executor and could allow remote code execution.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-22965UScritical9.8OT criticalKEV
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run…
CVE-2022-22950USmedium6.5—
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of servi…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationLumada Asset Performance Manager (APM)

    Disabling the Prognostic Model Executor service will cause the Lumada APM application to stop performing condition assessment calculations (for all assets configured to use prognostic models) and to accumulate calculation requests in the internal messaging queue. As the requests in the queue have a limited lifetime (set by messaging bus topic retention), when that lifetime expires, the request will be lost.

  • MitigationLumada Asset Performance Manager (APM)

    Disabling the Prognostic Model Executor service will cause the Lumada APM application to stop performing condition assessment calculations (for all assets configured to use prognostic models) and to accumulate calculation requests in the internal messaging queue. As the requests in the queue have a limited lifetime (set by messaging bus topic retention), when that lifetime expires, the request will be lost.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan