Hitachi Energy APM Edge Product
Advisory ansehen veröffentlicht 2026-07-28
Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-43500US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
The DATA-packet handler in rxrpc_input_… | ||||
| CVE-2026-43284US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
MSG_SPLICE_PAGES can attach pages from a pipe directly t… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- [1] Industrial Control Systems Cybersecurity Best Practicesself
- [2] APM Edge Dirty Frag Vulnerability Mitigation Instructionsself
- Dirty Frag Vulnerabilities in Hitachi Energy APM Edge Productself
- ICS Advisory ICSA-26-225-04 JSONself
- ICS Advisory ICSA-26-225-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationAPM Edge
Disable the esp4 and esp6 modules [2]
- MitigationAPM Edge
Disable the rxrpc module [2]
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan