Hitachi Energy MACH GWS products
Hitachi Energy is aware of the multiple vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-7940US | critical9.8OT erhöht | — | ||
The product exposes a service that is intended for local only to
all network interfaces without any authentication. | ||||
| CVE-2024-4872US | high8.8 | — | ||
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat… | ||||
| CVE-2024-3982US | high8.2OT erhöht | — | ||
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of a… | ||||
| CVE-2024-3980US | high8.8 | — | ||
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names
that are used in filesystem operations. If exploited the vulnerab… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MACH GWS productself
- ICS Advisory ICSA-25-133-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-133-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationMACH GWS
Apply the patch HF3 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- MitigationMACH GWS
Apply the patch HF3 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- BehobenMACH GWS
Apply the patch HF1 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- BehobenMACH GWS
Apply the patch HF1 to HF6 sequentially Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- BehobenMACH GWS
Upgrade to version 3.4.0.0 Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
- BehobenMACH GWS
Upgrade to version 3.4.0.0 Or apply general mitigation factors (Due to complexity of individual implementation of project, contact local account team for further information on possible upgrades and mitigation strategies.)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan