Vulnerabilidades em Hitachi Energy

118 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hitachi Energy apresenta um perfil de risco contido em termos de exploração ativa: nenhuma CVE consta no catálogo KEV da CISA, taxa abaixo da média geral do catálogo, e o EPSS mais elevado registrado — atribuído à CVE-2021-35534 — é de 0,0167, valor consideravelmente baixo. Das 105 CVEs catalogadas, 8 são classificadas como críticas e nenhuma possui prova de conceito pública disponível, o que reduz o risco de exploração oportunista imediata. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), padrão que historicamente serve de vetor para injeções e manipulação de dados em sistemas de controle industrial, merecendo atenção em revisões de código e hardening de interfaces. A chegada de 2 novas CVEs nos últimos 90 dias indica atividade de descoberta em andamento, justificando monitoramento contínuo mesmo diante do baixo nível de exploração observado.

CVE-2026-9852MEDIUMA CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrEPSS 0.2%CVE-2024-2377HIGHA vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this EPSS 0.2%CVE-2025-39205HIGHA vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-EPSS 0.2%CVE-2026-13162HIGHAn OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commandEPSS 0.2%CVE-2026-10756HIGHTRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to EPSS 0.2%CVE-2026-8479MEDIUMIEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messEPSS 0.2%CVE-2021-35532—Firmware upload verification bypass in TXpert Hub CoreTec 4EPSS 0.2%CVE-2024-28023MEDIUMA vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintEPSS 0.2%CVE-2025-7740HIGHUse of default credentials vulnerability in Hitachi Energy SuprOS productEPSS 0.2%CVE-2022-2513HIGHCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 ProductsEPSS 0.2%CVE-2025-1037HIGHBy making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands EPSS 0.2%CVE-2026-9853HIGHA vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read aEPSS 0.1%CVE-2026-9854HIGHA vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminisEPSS 0.1%CVE-2025-39201MEDIUMA vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system filEPSS 0.1%CVE-2021-22278MEDIUMCertificate verification vulnerability in Update Manager of PCM600 Engineering ToolEPSS 0.1%CVE-2024-28024MEDIUMA vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessibEPSS 0.1%CVE-2026-7310MEDIUMA heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local acceEPSS 0.1%CVE-2021-40341HIGHWeak DES encryptionEPSS 0.1%