Hitachi Energy FACTS Control Platform (FCP)
Hitachi Energy is aware of vulnerabilities that affect the FACTS Control systems with GWS component listed in this document. An attacker exploiting these vulnerabilities can cause impact on confidentiality, integrity and availability of the product. Following FACTS Control systems with GWS component deployed from year 2020 onwards are likely affected by the above vulnerabilities. Product deployments without GWS component are not affected. • SVC Light (STATCOM) • Fixed Series Capacitor • Thyristor Controlled Series Capacitor • Static Var Compensator • Static Watt Compensator • Hybrid Synchronous Condensers Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The affected FCP versions are only applicable if GWS component is present.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7941US | medium4.3 | — | ||
An HTTP parameter may contain a URL value and could cause
the web application to redirect the request to the specified URL.
By modifying the URL value to a malicious site, an attac… | ||||
| CVE-2024-7940US | critical9.8OT elevated | — | ||
The product exposes a service that is intended for local only to
all network interfaces without any authentication. | ||||
| CVE-2024-4872US | high8.8 | — | ||
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat… | ||||
| CVE-2024-3982US | high8.2OT elevated | — | ||
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of a… | ||||
| CVE-2024-3980US | high8.8 | — | ||
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names
that are used in filesystem operations. If exploited the vulnerab… | ||||
references
External citations — patches, advisories, analysis.
- Multiple Vulnerabilities in Hitachi Energy FACTS Control systems with GWS componentself
- ICS Advisory ICSA-26-260-03 JSONself
- ICS Advisory ICSA-26-260-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationFACTS Control Platform (FCP)
Follow general mitigation factors
- MitigationFACTS Control Platform (FCP)
Follow general mitigation factors
- MitigationFACTS Control Platform (FCP)
Follow general mitigation factors
- MitigationFACTS Control Platform (FCP)
Follow general mitigation factors
- MitigationFACTS Control Platform (FCP)
Follow general mitigation factors
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan