Skip to content
OpenAdvisories
High ICSA-23-005-03 3 CVEs

Hitachi Energy Lumada Asset Performance Management

Published Jan 5, 2023 · Updated Jan 5, 2023

Vendor: Hitachi Energy Product: Lumada APM

Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition or unauthorized remote arbitrary code execution.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-37434 Public exploit EPSS 19%

    zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

    openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3602 Public exploit EPSS 91%

    X.509 Email Address 4-byte Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the ap…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 7.5
    CVE-2022-3786 Public exploit EPSS 92%

    X.509 Email Address Variable Length Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an appli…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io

Revision history

  1. #1

    Publication Date

References