Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product
Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-2883US | critical9.8OT kritisch | KEV | ||
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 1… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Remote Code Execution Vulnerability in Hitachi Energy Service Suite Productself
- ICS Advisory ICSA-25-261-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-261-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationService Suite
Apply general Mitigation Factors
- BehobenService Suite
Update to version 9.8.2 or latest - Hitachi Energy recommends that customers apply the update at the earliest convenience - While reviewing the recommended immediate actions, assess the risk exposure of affected products within the operational environment and update or upgrade if necessary
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan