Summary
Hitachi Energy is aware of LINQ query related vulnerabilities that affect MACH SCM product versions listed below. Authenticated malicious clients successfully exploiting these vulnerabilities could execute arbitrary code that an attacker otherwise does not have authorization to do. Please refer to the Recommended Immediate Actions for information about mitigation and remediation.
Vulnerabilities 2
-
High 7.5
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the S…
-
High 7.0
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM ser…
Revision history
-
#2
• Updated MACH SCM affected and fixed versions. • Updated CVE-2024-2097 description and CVSS score for SCM Tools. • Added MACH SCM Tools affected and fixed versions.
-
#1
Initial version.
References
-
RCE vulnerabilities in Hitachi Energy MACH SCM product
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000189&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-24-116-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-116-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b