Hitachi Energy AFS, AFR and AFF Series
Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability.
describes (1)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-3596US | critical | — |
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-350-03 JSONself
- ICSA Advisory ICSA-25-350-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (21)
- MitigationAFF 660
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFF 665
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFR 677
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 650
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 655
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 660-B/C/S
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 665-B/S
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 670
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 670 v2.0
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 675
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- MitigationAFS 677
All affected products: Set the RADIUS configuration to default which enables the RADIUS server message authenticator option.
- FixedAFF 660
AFF 660, AFF 665, AFS 660-B/C/S, AFS 665-B/S, AFS 670: Command to enable Message Authenticator option: For AFS66x, AFS670 v2.0, AFF66x CLI: radius server auth modify msgauth MIB: hm2AgentRadiusServerMsgAuth
- FixedAFF 665
AFF 660, AFF 665, AFS 660-B/C/S, AFS 665-B/S, AFS 670: Command to enable Message Authenticator option: For AFS66x, AFS670 v2.0, AFF66x CLI: radius server auth modify msgauth MIB: hm2AgentRadiusServerMsgAuth
- FixedAFR 677
AFR 677, AFS 650, AFS 655, AFS 670, AFS 675, AFS 677: Command to enable Message Authenticator option: For AFS65x, AFS67x, AFR67x CLI: radius server msgauth MIB: hmAgentRadiusServerMsgAuth
- FixedAFS 650
AFR 677, AFS 650, AFS 655, AFS 670, AFS 675, AFS 677: Command to enable Message Authenticator option: For AFS65x, AFS67x, AFR67x CLI: radius server msgauth MIB: hmAgentRadiusServerMsgAuth
- FixedAFS 655
AFR 677, AFS 650, AFS 655, AFS 670, AFS 675, AFS 677: Command to enable Message Authenticator option: For AFS65x, AFS67x, AFR67x CLI: radius server msgauth MIB: hmAgentRadiusServerMsgAuth
- FixedAFS 660-B/C/S
AFF 660, AFF 665, AFS 660-B/C/S, AFS 665-B/S, AFS 670: Command to enable Message Authenticator option: For AFS66x, AFS670 v2.0, AFF66x CLI: radius server auth modify msgauth MIB: hm2AgentRadiusServerMsgAuth
- FixedAFS 665-B/S
AFF 660, AFF 665, AFS 660-B/C/S, AFS 665-B/S, AFS 670: Command to enable Message Authenticator option: For AFS66x, AFS670 v2.0, AFF66x CLI: radius server auth modify msgauth MIB: hm2AgentRadiusServerMsgAuth
- FixedAFS 670
AFF 660, AFF 665, AFS 660-B/C/S, AFS 665-B/S, AFS 670: Command to enable Message Authenticator option: For AFS66x, AFS670 v2.0, AFF66x CLI: radius server auth modify msgauth MIB: hm2AgentRadiusServerMsgAuth
- FixedAFS 675
AFR 677, AFS 650, AFS 655, AFS 670, AFS 675, AFS 677: Command to enable Message Authenticator option: For AFS65x, AFS67x, AFR67x CLI: radius server msgauth MIB: hmAgentRadiusServerMsgAuth
- FixedAFS 677
AFR 677, AFS 650, AFS 655, AFS 670, AFS 675, AFS 677: Command to enable Message Authenticator option: For AFS65x, AFS67x, AFR67x CLI: radius server msgauth MIB: hmAgentRadiusServerMsgAuth
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan