Summary
Hitachi Energy is aware of a vulnerability that affects the Asset Suite product versions listed in this document. An authenticated user successfully exploiting this vulnerability can manipulate or forge malicious entries into the log file causing integrity impact and potentially carrying out further malicious attacks. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
Vulnerabilities 1
-
Medium 6.0
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log da…
Revision history
-
#2
Update to Affected Product Versions
-
#1
Initial version.
References
-
Log Data Vulnerability in Hitachi Energy Asset Suite product
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000226&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-25-282-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-282-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b