Hitachi Energy Gateway Station
Advisory ansehen veröffentlicht 2023-03-06
Successful exploitation of these vulnerabilities could cause part of GWS fail to start, allow unauthorized actors to run scripts, and/or cause a denial-of-service.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2277US | high7.5 | — | ||
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when IC… | ||||
| CVE-2022-29922US | high7.5 | — | ||
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in t… | ||||
| CVE-2022-29492US | high7.5 | — | ||
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malform… | ||||
| CVE-2022-1778US | medium4.4 | — | ||
Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- BehobenGateway Station (GWS)
Avoid directly connecting control systems to the internet
- BehobenGateway Station (GWS)
Avoid directly connecting control systems to the internet
- BehobenGateway Station (GWS)
Avoid directly connecting control systems to the internet
- BehobenGateway Station (GWS)
Avoid directly connecting control systems to the internet
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan