ICSA-25-275-02

Hitachi Energy MSM

view advisory published 2025-09-30

Hitachi Energy is aware of open-source software vulnerabilities that affect MSM product versions listed below. If exploited, these vulnerabilities could result in XSS and DoS attacks, potentially causing confidentiality, integrity and availability impact to MSM. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-53155US	—	0.60% (48th)	—	2025-07-25
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter.
CVE-2024-53429US	—	0.74% (54th)	—	2024-11-21
Open62541 v1.4.6 is has an assertion failure in fuzz_binary_decode, which leads to a crash.

references

External citations — patches, advisories, analysis.

Open-Source Software Vulnerabilities in Hitachi Energy MSM Productself
ICS Advisory ICSA-25-275-02 JSONself
ICS Advisory ICSA-25-275-02 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (2)

MitigationMSM
Follow General Mitigation Factors
MitigationMSM
Follow General Mitigation Factors

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan