Hitachi Energy UNEM/ECST
Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-2462US | — | — | ||
Allow attackers to intercept or falsify data exchanges between the client
and the server | ||||
references
External citations — patches, advisories, analysis.
- CYBERSECURITY ADVISORY - SSH Host Key Verification Vulnerability in Hitachi Energy’s UNEM/ECST Productself
- ICS Advisory ICSA-25-063-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-063-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- No fix plannedUNEM R15A
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
- No fix plannedUNEM R16A
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
- FixedECST less than 16.2.1
Update to ECST_16.2.1
- FixedUNEM R15B PC4 or prior
Update to UNEM R15B PC5 and apply general mitigation factors. (Update planned)
- FixedUNEM R16B PC2 and earlier
Update to UNEM R16B PC3 or later and apply general mitigation factors.
- FixedXMC20 less than R16B
Update to XMC20 R16B
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan