Hitachi Energy MSM

Name: Hitachi Energy MSM
Brand: Hitachi Energy

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical8high1medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-16645US	high8.6	8.18% (95th)	Exploit	no fix	2019-09-20	≤ 2.2.5
CVE-2019-12822US	high7.5	8.85% (95th)	—	no fix	2019-06-14	≤ 2.2.5
CVE-2020-15688US	high8.8OT elevated	4.04% (91st)	—	no fix	2020-07-23	≤ 2.2.5
CVE-2018-15504US	high7.5	2.77% (86th)	—	no fix	2018-08-18	≤ 2.2.5
CVE-2015-6584US	medium4.3	2.68% (86th)	—	no fix	2015-09-11	≤ 2.2
CVE-2021-43298US	critical9.8	2.26% (83rd)	—	no fix	2022-01-25	≤ 2.2.5
CVE-2018-15505US	high7.5	2.23% (83rd)	—	no fix	2018-08-18	≤ 2.2.5
CVE-2021-41615US	critical9.8	1.40% (72nd)	—	no fix	2022-08-08	≤ 2.2.5
CVE-2022-3353US	high7.5	1.10% (66th)	—	no fix	2023-02-21	≤ MSM 2.2.3;0
CVE-2024-53429US	—	0.74% (54th)	—	no fix	2024-11-21	≤ vers:all/<=2.2.10
CVE-2023-53155US	—	0.60% (48th)	—	no fix	2025-07-25	≤ vers:all/<=2.2.10
CVE-2021-40336US	high8.8	0.50% (43rd)	—	no fix	2022-07-25	2 versions
CVE-2021-40335US	high8.8	0.23% (13th)	—	no fix	2022-07-25	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-1357Reliance on Insufficiently Trustworthy Component1 CVEs
CWE-208Observable Timing Discrepancy1 CVEs
CWE-294Authentication Bypass by Capture-replay1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.