Skip to content
OpenAdvisories
High ICSA-22-333-02 1 CVE

Hitachi Energy IED Connectivity Packages and PCM600 Products (Update A)

Published Nov 29, 2022 · Updated Jul 23, 2024 · Revision 2

Vendor: Hitachi Energy Product: 650 Connectivity Package Product: 670 Connectivity Package Product: GMS600 Connectivity Package Product: PCM600 Product: PWC600 Connectivity Package Product: SAM600-IO Connectivity Package

Summary

Successful exploitation of this vulnerability could allow an attacker to obtain sensitive credentials and gain access to the affected products, perform unauthorized modifications, or provoke a denial-of-service condition.

Vulnerabilities 1

  • High 7.1
    CVE-2022-2513

    Cleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 Products

    A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in …

    Hitachi Energy PCM600 PWC600 Connectivity Package 650 Connectivity Package ICS / OT

Revision history

  1. #2

    Update A - Updated vulnerability description and mitigation section

  2. #1

    Initial Publication

References