ICSA-23-143-01

icsaUScisa_csaf_ot

Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products

Advisory ansehen veröffentlicht 2023-05-31

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or lead to a Denial-of-Service (DoS).

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-43680UShigh7.5Exploit
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
CVE-2022-40674UShigh8.1—
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (14)

  • BehobenAFF660/665

    AFF660/665: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming release.

  • BehobenAFF660/665

    AFF660/665: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming release.

  • BehobenAFR67x

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • BehobenAFR67x

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • BehobenAFS65X

    AFS65x: EoL product - only mitigation available, no remediation expected. Apply mitigation strategy as described in General Mitigation Factors Section.

  • BehobenAFS65X

    AFS65x: EoL product - only mitigation available, no remediation expected. Apply mitigation strategy as described in General Mitigation Factors Section.

  • BehobenAFS660/665C

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • BehobenAFS660/665C

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • BehobenAFS660/665S

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • BehobenAFS660/665S

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • BehobenAFS670/675

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • BehobenAFS670/675

    AFS670/675, AFR67x: Apply mitigation strategy as described in General Mitigation Factors Section or update to 9.1.08.

  • BehobenAFS670v2

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

  • BehobenAFS670v2

    AFS660/665S, AFS660/665C, AFS670v2: Apply mitigation strategy as described in General Mitigation Factors Section or update to upcoming 7.1.08 when available.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan