Hitachi Energy Vulnerabilities and Affected Products
Vulnerabilities associated with PCM600.
Products
Clear product- FOXMAN-UN15 vulnerabilities
- UNEM15 vulnerabilities
- MicroSCADA X SYS60014 vulnerabilities
- RTU500 series CMU firmware9 vulnerabilities
- RTU5007 vulnerabilities
- SDM6007 vulnerabilities
- MicroSCADA Pro SYS6005 vulnerabilities
- FOX61x4 vulnerabilities
- RTU500 series4 vulnerabilities
- Asset Suite3 vulnerabilities
- eSOMS3 vulnerabilities
- MicroSCADA SYS6003 vulnerabilities
- MSM3 vulnerabilities
- TRMTracker3 vulnerabilities
- TropOS 4th Gen3 vulnerabilities
- TXpert Hub CoreTec 4 version3 vulnerabilities
- GMS6002 vulnerabilities
- MACH System Software2 vulnerabilities
- NSD570 Teleprotection Equipment2 vulnerabilities
- PCM6002 vulnerabilities
- PWC6002 vulnerabilities
- Relion 670 Series2 vulnerabilities
- Relion 670/650 and SAM600-IO2 vulnerabilities
- Relion 670/650 Series2 vulnerabilities
- Relion 670/650/SAM600-IO2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-2513HIGH | Cleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 ProductsA vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in the PCM600 database and logs files. An attacker having get access to the exported backup file can exploit the vulnerability and obtain user credentials of the IEDs. Additionally, an attacker with administrator access to the PCM600 host machi… CWE-312Nov 22, 2022 | CVSS7.1v3.1 | EPSS0.146% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-22278MEDIUM | Certificate verification vulnerability in Update Manager of PCM600 Engineering ToolA certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed. CWE-295Oct 28, 2021 | CVSS6.7v3.1 | EPSS0.124% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |