ICSA-23-234-01

Hitachi Energy AFF66x

view advisory published 2023-08-22

Successful exploitation of these vulnerabilities could allow an attacker to compromise availability, integrity, and confidentiality of the targeted devices.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-3204US	high7.5	1.65% (76th)	—	2022-09-26
A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a mali…
CVE-2021-43523US	critical9.6	3.07% (88th)	—	2021-11-10
In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnamein…
CVE-2020-13817US	high7.4OT elevated	3.36% (89th)	—	2020-06-04
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for…
CVE-2020-11868US	high7.5	2.12% (82nd)	—	2020-04-17
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address,…
CVE-2019-11477US	high7.5	98.7% (100th)	Exploit	2019-06-19
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).…
CVE-2018-18066US	high7.5	3.59% (89th)	—	2018-10-08
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to cra…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-23-234-01 JSONself
Recommended Practicesexternal
ICSA Advisory ICSA-23-234-01 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (12)

MitigationAFF660/665
Configure only trusted DNS server(s).
MitigationAFF660/665
Configure only trusted DNS server(s).
MitigationAFF660/665
Configure only trusted DNS server(s).
MitigationAFF660/665
Configure only trusted DNS server(s).
MitigationAFF660/665
Configure only trusted DNS server(s).
MitigationAFF660/665
Configure only trusted DNS server(s).
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.
FixedAFF660/665
Update to upcoming AFF660/665 FW 04.6.01 release when available.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan