Summary
Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation.
Vulnerabilities 2
-
High 8.7
TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to rea…
-
High 7.7
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access …
Revision history
-
#2
Initial CISA Republication of Hitachi Energy PSIRT 8DBD000224 advisory
-
#1
Initial Public release
References
-
[1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practices
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000235&LanguageCode=en&DocumentPartId=&Action=Launch
-
Multiple vulnerabilities in Hitachi Energy TRO600 series products
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000224&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory icsa-26-302-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-302-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b