Hitachi Energy Asset Suite
Hitachi Energy is aware multiple vulnerabilities that affects the Asset Suite product versions listed below. If these vulnerabilities are successfully exploited by an attacker, it could have an impact on the confidentiality, integrity, or availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-2500US | — | — | ||
A vulnerability exists in the SOAP Web services of the Asset
Suite versions listed below. If successfully exploited, an attacker
could gain unauthorized access to the product and… | ||||
| CVE-2025-1484US | — | — | ||
A vulnerability exists in the media upload component of the Asset
Suite versions listed below. If successfully exploited an attacker
could impact the confidentiality or integrity… | ||||
| CVE-2019-9429US | high7.8 | — | ||
In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User… | ||||
| CVE-2019-9290US | high7.8 | — | ||
In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local escalation of privilege with no additional e… | ||||
| CVE-2019-9262US | high8.8 | — | ||
In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution… | ||||
| CVE-2019-9256US | high8.8 | — | ||
In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. Us… | ||||
references
External citations — patches, advisories, analysis.
- CYBERSECURITY ADVISORY - Cross-Site Scripting & Mobile Application Vulnerabilities in Hitachi Energy’s Asset Suite Productself
- ICS Advisory ICSA-25-196-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-196-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.6.4.4
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.6.4.4
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.7
Apply General Mitigation Factors/Workarounds
- FixedAsset Suite version 9.6.4.4
Update to Asset Suite Version 9.6.4.5 when available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan