Hitachi Energy APM Edge Product
view advisory published 2026-07-28
Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-43500US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
The DATA-packet handler in rxrpc_input_… | ||||
| CVE-2026-43284US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
MSG_SPLICE_PAGES can attach pages from a pipe directly t… | ||||
02
references
External citations — patches, advisories, analysis.
- [1] Industrial Control Systems Cybersecurity Best Practicesself
- [2] APM Edge Dirty Frag Vulnerability Mitigation Instructionsself
- Dirty Frag Vulnerabilities in Hitachi Energy APM Edge Productself
- ICS Advisory ICSA-26-225-04 JSONself
- ICS Advisory ICSA-26-225-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationAPM Edge
Disable the esp4 and esp6 modules [2]
- MitigationAPM Edge
Disable the rxrpc module [2]
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan