Hitachi Energy eSOMS
Advisory ansehen veröffentlicht 2023-11-09
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information related to eSOMS application configuration.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5516US | medium5.3 | — | ||
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing
information about the underlying technology and ot… | ||||
| CVE-2023-5515US | medium5.3 | — | ||
The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to furth… | ||||
| CVE-2023-5514US | medium5.3 | — | ||
The response messages received from the eSOMS report generation using certain parameter queries with full file path can be
abused for enumerating the local file system structure.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-313-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-313-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
- MitigationeSOMS
Hitachi Energy recommends updating eSOMS to a fixed version when available.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan