Hitachi Energy MACH GWS products
Hitachi Energy is aware of the multiple vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7940US | critical9.8OT elevated | — | ||
The product exposes a service that is intended for local only to
all network interfaces without any authentication. | ||||
| CVE-2024-4872US | high8.8 | — | ||
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat… | ||||
| CVE-2024-3982US | high8.2OT elevated | — | ||
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of a… | ||||
| CVE-2024-3980US | high8.8 | — | ||
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names
that are used in filesystem operations. If exploited the vulnerab… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MACH GWS productself
- ICS Advisory ICSA-25-133-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-133-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationMACH GWS
Apply the patch HF3 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- MitigationMACH GWS
Apply the patch HF3 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- FixedMACH GWS
Apply the patch HF1 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- FixedMACH GWS
Apply the patch HF1 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- FixedMACH GWS
Upgrade to version 3.4.0.0 Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- FixedMACH GWS
Upgrade to version 3.4.0.0 Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan