Summary
Hitachi Energy is aware of a vulnerability in third party component Intel Chipset Device Software, that affects MACH PS700 v2 product versions listed in this document. Authenticated malicious clients successfully exploiting this vulnerability could escalate the privilege to cause confidentiality, integrity and availability impacts.
Please refer to the Recommended Immediate Actions for information about mitigation and remediation.
Vulnerabilities 1
-
Medium 6.7
Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an a…
Revision history
-
#1
Initial version.
References
-
Cybersecurity Advisory - Intel Chipset Software Vulnerability in Hitachi Energy MACH PS700 v2 System
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000208&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-25-063-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-03
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B