ICSA-26-008-01

Hitachi Energy Asset Suite

Advisory ansehen veröffentlicht 2025-12-09

Hitachi Energy is aware of a Jasper Report vulnerability that affects the Asset Suite product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution (RCE) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-10492US	critical9.8	0.92% (60th)	—	2025-09-16
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Jasper Report Vulnerability in Hitachi Energy Asset Suite Productself
ICS Advisory ICSA-26-008-01 JSONself
ICS Advisory ICSA-26-008-01 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (2)

MitigationAsset Suite
Apply general mitigation factors
BehobenAsset Suite
Update to version 9.8

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan