ICSA-25-289-11

icsaUScisa_csaf_ot

Hitachi Energy MACH GWS

Advisory ansehen veröffentlicht 2025-09-30

Hitachi Energy is aware of these vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-39205US——
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper…
CVE-2025-39203US——
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting…
CVE-2025-39201USmedium6.1OT erhöht—
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationMACH GWS

    Apply general mitigation factors

  • MitigationMACH GWS

    Apply general mitigation factors

  • MitigationMACH GWS

    Apply general mitigation factors

  • BehobenMACH GWS

    Upgrade to version 3.5

  • BehobenMACH GWS

    Upgrade to version 3.5

  • BehobenMACH GWS

    Upgrade to version 3.5

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan