ICSA-23-143-01

icsaUScisa_csaf_ot

Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products

view advisory published 2023-05-31

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or lead to a Denial-of-Service (DoS).

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-43680UShigh7.5Exploit
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
CVE-2022-40674UShigh8.1—
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • FixedAFF660/665

    AFF660/665: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming release.

  • FixedAFF660/665

    AFF660/665: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming release.

  • FixedAFR67x

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • FixedAFR67x

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • FixedAFS65X

    AFS65x: EoL product - only mitigation available, no remediation expected. Apply mitigation strategy as described in General Mitigation Factors Section.

  • FixedAFS65X

    AFS65x: EoL product - only mitigation available, no remediation expected. Apply mitigation strategy as described in General Mitigation Factors Section.

  • FixedAFS660/665C

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • FixedAFS660/665C

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • FixedAFS660/665S

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • FixedAFS660/665S

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • FixedAFS670/675

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • FixedAFS670/675

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • FixedAFS670v2

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • FixedAFS670v2

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan