Hitachi Energy Asset Suite
Hitachi Energy is aware multiple vulnerabilities that affects the Asset Suite product versions listed below. If these vulnerabilities are successfully exploited by an attacker, it could have an impact on the confidentiality, integrity, or availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-2500US | — | — | ||
A vulnerability exists in the SOAP Web services of the Asset
Suite versions listed below. If successfully exploited, an attacker
could gain unauthorized access to the product and… | ||||
| CVE-2025-1484US | — | — | ||
A vulnerability exists in the media upload component of the Asset
Suite versions listed below. If successfully exploited an attacker
could impact the confidentiality or integrity… | ||||
| CVE-2019-9429US | high7.8 | — | ||
In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User… | ||||
| CVE-2019-9290US | high7.8 | — | ||
In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local escalation of privilege with no additional e… | ||||
| CVE-2019-9262US | high8.8 | — | ||
In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution… | ||||
| CVE-2019-9256US | high8.8 | — | ||
In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. Us… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CYBERSECURITY ADVISORY - Cross-Site Scripting & Mobile Application Vulnerabilities in Hitachi Energy’s Asset Suite Productself
- ICS Advisory ICSA-25-196-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-196-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite AnyWhere for Inventory (AWI) Android mobile app versions 11.5 (awi_11.5_armv7) and earlier
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.6.4.4
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.6.4.4
Apply General Mitigation Factors/Workarounds
- MitigationAsset Suite version 9.7
Apply General Mitigation Factors/Workarounds
- BehobenAsset Suite version 9.6.4.4
Update to Asset Suite Version 9.6.4.5 when available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan