Hitachi Energy MicroSCADA Pro X SYS600
Advisory ansehen veröffentlicht 2022-09-29
Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-0778US | high7.5 | Exploit | ||
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi… | ||||
| CVE-2020-25692US | high7.5 | — | ||
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the s… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-272-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (4)
- Mitigation SYS600
Hitachi Energy recommends following 1MRK511518 MicroSCADA X Cyber Security Deployment Guidelines.
- Mitigation SYS600
Hitachi Energy recommends following 1MRK511518 MicroSCADA X Cyber Security Deployment Guidelines.
- Behoben SYS600
For SYS600 10.x: update to at least SYS600 version 10.4.
- Behoben SYS600
For SYS600 10.x: update to at least SYS600 version 10.4.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan