Skip to content
OpenAdvisories
Medium ICSA-22-088-03 4 CVEs

Hitachi Energy LinkOne WebView

Published Mar 29, 2022 · Updated Mar 29, 2022

Vendor: Hitachi Energy Product: LinkOne WebView

Summary

Successful exploitation of these vulnerabilities could allow an attacker to modify a victim 's system files or information, disclose application full path, disclose sensitive information to an unauthorized actor, and launch a common web attack.

Vulnerabilities 4

  • Medium 4.2
    CVE-2021-40337

    OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

    Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an attacker that manages to exploit the vulnerability can take advantage to exploit multiple web attacks and stole sensitive information. This issue affects: Hitachi Energy LinkOne 3.20…

    Hitachi Energy LinkOne ICS / OT
  • Low 3.7
    CVE-2021-40338

    OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

    Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Ene…

  • Low 3.7
    CVE-2021-40339

    OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

    Configuration vulnerability in Hitachi Energy LinkOne application due to the lack of HTTP Headers, allows an attacker that manages to exploit this vulnerability to retrieve sensitive information. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.…

  • Low 3.7
    CVE-2021-40340

    OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

    Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, an attacker that manages to exploit this vulnerability can use the exposed information as a reconnais…

Revision history

  1. #1

    ICSA-22-088-03 Hitachi Energy LinkOne WebView

References