Skip to content
OpenAdvisories
Medium ICSA-26-125-01 1 CVE

Hitachi Energy PCM600 (Update A)

Published Apr 28, 2026 · Updated Oct 29, 2026 · Revision 4

Vendor: Hitachi Energy Product: PCM600 Product: PCM600 Legacy

Summary

Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions listed in this document. An attacker successfully exploiting this vulnerability can impact integrity of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

Vulnerabilities 1

  • Medium 5.5
    CVE-2018-1002208

    Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib

    SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    SharpZipLib SharpZipLib mono mono Debian Ubuntu NuGet

Revision history

  1. #4

    CISA Republication update based on Hitachi Energy PSIRT 8DBD000239 advisory

  2. #3

    Remediation released in PCM600 v3.1 SP4 on 16-09-2026

  3. #2

    CISA Republication - Initial CISA Republication of Hitachi Energy 8DBD000239 advisory

  4. #1

    Initial public release

References