Hitachi Energy e-mesh EMS
Hitachi Energy is aware of a buffer overflow vulnerability that affects e-mesh EMS product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages (denial of service) and possible arbitrary code execution. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-42945US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or s… | ||||
references
External citations — patches, advisories, analysis.
- [1] Industrial Control Systems Cybersecurity Best Practicesself
- Buffer Overflow Vulnerability in Hitachi Energy e-mesh EMS Productself
- ICS Advisory ICSA-26-188-03 JSONself
- ICS Advisory ICSA-26-188-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationHitachi Energy e-mesh EMS
Ensure rewrite configuration does not contain "?" to replace unnamed captures, and ensure ASLR is set to active (value=2) across all deployment targets covering all 3 versions.
- FixedHitachi Energy e-mesh EMS
Apply hotfix for respective e-mesh EMS versions to update NGINX to either v1.30.2 or latest
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan