Vulnerabilidades en Hitachi Energy
118 resultadosCVE-2026-9852MEDIUMA CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrEPSS 0.2%CVE-2024-2377HIGHA vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this EPSS 0.2%CVE-2025-39205HIGHA vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-EPSS 0.2%CVE-2026-13162HIGHAn OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commandEPSS 0.2%CVE-2026-10756HIGHTRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to EPSS 0.2%CVE-2026-8479MEDIUMIEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable
for a NULL pointer dereferencing, if a specially crafted
sequence of messEPSS 0.2%CVE-2021-35532—Firmware upload verification bypass in TXpert Hub CoreTec 4EPSS 0.2%CVE-2024-28023MEDIUMA vulnerability exists in the message queueing mechanism that if
exploited can lead to the exposure of resources or functionality to
unintEPSS 0.2%CVE-2025-7740HIGHUse of default credentials vulnerability in Hitachi Energy SuprOS productEPSS 0.2%CVE-2022-2513HIGHCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 ProductsEPSS 0.2%CVE-2025-1037HIGHBy making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands EPSS 0.2%CVE-2026-9853HIGHA vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read aEPSS 0.1%CVE-2026-9854HIGHA vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminisEPSS 0.1%CVE-2025-39201MEDIUMA vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system filEPSS 0.1%CVE-2021-22278MEDIUMCertificate verification vulnerability in Update Manager of PCM600 Engineering ToolEPSS 0.1%CVE-2024-28024MEDIUMA vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is
stored in cleartext within a resource that might be accessibEPSS 0.1%CVE-2026-7310MEDIUMA heap-based buffer overflow vulnerability exists in XML
parser functionality in the HiDraw. An authenticated
malicious user with local acceEPSS 0.1%CVE-2021-40341HIGHWeak DES encryptionEPSS 0.1%