Hitachi Energy Gateway Station
view advisory published 2023-03-06
Successful exploitation of these vulnerabilities could cause part of GWS fail to start, allow unauthorized actors to run scripts, and/or cause a denial-of-service.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2277US | high7.5 | — | ||
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when IC… | ||||
| CVE-2022-29922US | high7.5 | — | ||
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in t… | ||||
| CVE-2022-29492US | high7.5 | — | ||
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malform… | ||||
| CVE-2022-1778US | medium4.4 | — | ||
Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start th… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- FixedGateway Station (GWS)
Avoid directly connecting control systems to the internet
- FixedGateway Station (GWS)
Avoid directly connecting control systems to the internet
- FixedGateway Station (GWS)
Avoid directly connecting control systems to the internet
- FixedGateway Station (GWS)
Avoid directly connecting control systems to the internet
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan