See how hitachienergy compares to other vendors in security performance
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself.
Only the SYS600 system users should be permitted to view and modify application objects.
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue attackers would need a way to create arbitrary log messages. This could be achieved through normal functionality via SCIL scripts, a log injection vulnerability, or via the SYS600 broker. This vulnerability affects all Windows users regardless of their privilege level who can run the Notify service and export the log.
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to user input being improperly sanitized.
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption.
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop.
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that are critical to the application.
A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in the PCM600 database and logs files. An attacker having get access to the exported backup file can exploit the vulnerability and obtain user credentials of the IEDs. Additionally, an attacker with administrator access to the PCM600 host machine can obtain other user credentials by analyzing database log files. The credentials may be used to perform unauthorized modifications such as loading incorrect configurations, reboot the IEDs or cause a denial-of-service on the IEDs.
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too distant in the future to any remote ICCP system. By default, ICCP is not configured and not enabled. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10.2 to version 10.3.1. cpe:2.3:a:hitachienergy:microscadaxsys600:10.2::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3.1:::::::
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS600 product. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscadaprosys600:9.0::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.1::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.2::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.3::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.4::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3.1:::::::
Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start the SYS600. The configuration file can only be accessed by an administrator access. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscadaxsys600:10::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3.1:::::::
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected connection is left open. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscadaprosys600:9.0::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.1::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.2::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.3::::::: cpe:2.3:a:hitachienergy:microscadaprosys600:9.4::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.1.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.2.1::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3::::::: cpe:2.3:a:hitachienergy:microscadaxsys600:10.3.1:::::::
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allows an attacker to obtain sensitive information and gain access to the network elements that are managed by the affected products versions.
This issue affects
FOXMAN-UN product: FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; UNEM product: UNEM R16A, UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs: cpe:2.3:a:hitachienergy:foxman-un:R16A::::::: cpe:2.3:a:hitachienergy:foxman-un:R15B::::::: cpe:2.3:a:hitachienergy:foxman-un:R15A::::::: cpe:2.3:a:hitachienergy:foxman-un:R14B::::::: cpe:2.3:a:hitachienergy:foxman-un:R14A::::::: cpe:2.3:a:hitachienergy:foxman-un:R11B::::::: cpe:2.3:a:hitachienergy:foxman-un:R11A::::::: cpe:2.3:a:hitachienergy:foxman-un:R10C::::::: cpe:2.3:a:hitachienergy:foxman-un:R9C::::::: cpe:2.3:a:hitachienergy:unem:R16A::::::: cpe:2.3:a:hitachienergy:unem:R15B::::::: cpe:2.3:a:hitachienergy:unem:R15A::::::: cpe:2.3:a:hitachienergy:unem:R14B::::::: cpe:2.3:a:hitachienergy:unem:R14A::::::: cpe:2.3:a:hitachienergy:unem:R11B::::::: cpe:2.3:a:hitachienergy:unem:R11A::::::: cpe:2.3:a:hitachienergy:unem:R10C::::::: cpe:2.3:a:hitachienergy:unem:R9C:::::::
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file.
This issue affects
FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs: cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::
cpe:2.3:a:hitachienergy:foxman-un:R15A::::::: cpe:2.3:a:hitachienergy:foxman-un:R14B::::::: cpe:2.3:a:hitachienergy:foxman-un:R14A::::::: cpe:2.3:a:hitachienergy:foxman-un:R11B::::::: cpe:2.3:a:hitachienergy:foxman-un:R11A::::::: cpe:2.3:a:hitachienergy:foxman-un:R10C::::::: cpe:2.3:a:hitachienergy:foxman-un:R9C::::::: cpe:2.3:a:hitachienergy:unem:R15B:::::::
cpe:2.3:a:hitachienergy:unem:R15A::::::: cpe:2.3:a:hitachienergy:unem:R14B::::::: cpe:2.3:a:hitachienergy:unem:R14A::::::: cpe:2.3:a:hitachienergy:unem:R11B::::::: cpe:2.3:a:hitachienergy:unem:R11A::::::: cpe:2.3:a:hitachienergy:unem:R10C::::::: cpe:2.3:a:hitachienergy:unem:R9C:::::::
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue.
This issue affects
FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs: cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::
cpe:2.3:a:hitachienergy:foxman-un:R15A::::::: cpe:2.3:a:hitachienergy:foxman-un:R14B::::::: cpe:2.3:a:hitachienergy:foxman-un:R14A::::::: cpe:2.3:a:hitachienergy:foxman-un:R11B::::::: cpe:2.3:a:hitachienergy:foxman-un:R11A::::::: cpe:2.3:a:hitachienergy:foxman-un:R10C::::::: cpe:2.3:a:hitachienergy:foxman-un:R9C::::::: cpe:2.3:a:hitachienergy:unem:R15B:::::::
cpe:2.3:a:hitachienergy:unem:R15A::::::: cpe:2.3:a:hitachienergy:unem:R14B::::::: cpe:2.3:a:hitachienergy:unem:R14A::::::: cpe:2.3:a:hitachienergy:unem:R11B::::::: cpe:2.3:a:hitachienergy:unem:R11A::::::: cpe:2.3:a:hitachienergy:unem:R10C::::::: cpe:2.3:a:hitachienergy:unem:R9C:::::::
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This protocol is not encrypted and allows tracing of internal messages.
This issue affects
FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs: cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::
cpe:2.3:a:hitachienergy:foxman-un:R15A::::::: cpe:2.3:a:hitachienergy:foxman-un:R14B::::::: cpe:2.3:a:hitachienergy:foxman-un:R14A::::::: cpe:2.3:a:hitachienergy:foxman-un:R11B::::::: cpe:2.3:a:hitachienergy:foxman-un:R11A::::::: cpe:2.3:a:hitachienergy:foxman-un:R10C::::::: cpe:2.3:a:hitachienergy:foxman-un:R9C::::::: cpe:2.3:a:hitachienergy:unem:R15B:::::::
cpe:2.3:a:hitachienergy:unem:R15A::::::: cpe:2.3:a:hitachienergy:unem:R14B::::::: cpe:2.3:a:hitachienergy:unem:R14A::::::: cpe:2.3:a:hitachienergy:unem:R11B::::::: cpe:2.3:a:hitachienergy:unem:R11A::::::: cpe:2.3:a:hitachienergy:unem:R10C::::::: cpe:2.3:a:hitachienergy:unem:R9C:::::::