ICSA-23-019-01

Hitachi Energy PCU400

view advisory published 2023-01-19

Successful exploitation of these vulnerabilities could result in a denial-of-service condition on both the logging function of the device and its associated server.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
CVE-2022-3602US	high7.5	90.8% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-23-019-01 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-23-019-01 Web Versionself

remediations (8)

MitigationPCU400
Apply security updates to installed software components.
MitigationPCU400
Apply security updates to installed software components.
MitigationPCULogger tool
Apply security updates to installed software components.
MitigationPCULogger tool
Apply security updates to installed software components.
FixedPCU400
PCU400: Version 9.3.8 or 9.4 or later
FixedPCU400
PCU400: Version 9.3.8 or 9.4 or later
FixedPCULogger tool
PCU400: Version 9.3.8 or 9.4 or later
FixedPCULogger tool
PCU400: Version 9.3.8 or 9.4 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan