CVE-2024-2377: high-severity vulnerability in Hitachi Energy SDM600
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.6epss 0.2%
A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Hitachi Energy · SDM600Related CVEs — Hitachi Energy SDM600
In the same product, most dangerous first.
CVE-2022-3686MEDIUMSDM600 API permission checkEPSS 1.4%CVE-2022-3682CRITICALSDM600 file permission validationEPSS 0.8%CVE-2022-3684HIGHSDM600 endpoint vulnerability EPSS 0.6%CVE-2022-3683HIGHSDM600 API web services authorization validationEPSS 0.5%CVE-2022-3685HIGHSDM600 software privilege levelEPSS 0.3%CVE-2024-2378HIGHCVE-2024-2378EPSS 0.2%