Hitachi Energy eSOMS
view advisory published 2023-11-09
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information related to eSOMS application configuration.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5516US | medium5.3 | — | ||
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing
information about the underlying technology and ot… | ||||
| CVE-2023-5515US | medium5.3 | — | ||
The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to furth… | ||||
| CVE-2023-5514US | medium5.3 | — | ||
The response messages received from the eSOMS report generation using certain parameter queries with full file path can be
abused for enumerating the local file system structure.… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-313-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-313-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan