Summary
Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
Vulnerabilities 1
-
Medium 6.8
Allow attackers to intercept or falsify data exchanges between the client and the server
Revision history
-
#1.0.0
Initial version.
References
-
CYBERSECURITY ADVISORY - SSH Host Key Verification Vulnerability in Hitachi Energy’s UNEM/ECST Product
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000203&languageCode=en&Preview=true
-
ICS Advisory ICSA-25-063-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-05
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B