ICSA-23-019-01

Hitachi Energy PCU400

Advisory ansehen veröffentlicht 2023-01-19

Successful exploitation of these vulnerabilities could result in a denial-of-service condition on both the logging function of the device and its associated server.

beschreibt (2)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
CVE-2022-3602US	high7.5	90.8% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-23-019-01 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-23-019-01 Web Versionself

Behebungen (8)

MitigationPCU400
Apply security updates to installed software components.
MitigationPCU400
Apply security updates to installed software components.
MitigationPCULogger tool
Apply security updates to installed software components.
MitigationPCULogger tool
Apply security updates to installed software components.
BehobenPCU400
PCU400: Version 9.3.8 or 9.4 or later
BehobenPCU400
PCU400: Version 9.3.8 or 9.4 or later
BehobenPCULogger tool
PCU400: Version 9.3.8 or 9.4 or later
BehobenPCULogger tool
PCU400: Version 9.3.8 or 9.4 or later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan