High ICSA-23-143-01 2 CVEs

Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products

Published May 31, 2023 · Updated May 31, 2023

Vendor: Hitachi Energy Product: AFF660/665 Product: AFR67x Product: AFS65x Product: AFS660/665C Product: AFS660/665S Product: AFS670/675 Product: AFS670v2

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or lead to a Denial-of-Service (DoS).

Vulnerabilities 2

High 8.1

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Sep 14, 2022
High 7.5

CVE-2022-43680 Public exploit

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine

Oct 24, 2022

Revision history

2023-05-31 #1
CSAF Creation Date

References

ICS Advisory ICSA-23-143-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-01
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
Recommended Practices
https://cisa.gov/ics