Hitachi Energy Modular Switchgear Monitoring (MSM)
Successful exploitation of these vulnerabilities could allow an attacker to perform malicious command injection, trick a valid user into downloading malicious software onto their computer. Successful exploitation may also allow an attacker to pose as a legitimate user.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-40336US | high8.8 | — | ||
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploite… | ||||
| CVE-2021-40335US | high8.8 | — | ||
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationMSM
Ensure process control systems have no direct connections to the internet.
- MitigationMSM
Ensure process control systems have no direct connections to the internet.
- BehobenMSM
Links used for access to an MSM system should not be sent by email links to MSM should not be opened. Suspicious emails should be reported to the IT administrator.
- BehobenMSM
Links used for access to an MSM system should not be sent by email. Links to MSM should not be opened. Suspicious emails should be reported to the IT administrator.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan