Vendor
Hitachi Energy
118 known vulnerabilities.
Products
FOXMAN-UN 15
UNEM 15
MicroSCADA X SYS600 14
RTU500 series CMU firmware 13
RTU500 7
SDM600 7
MicroSCADA SYS600 6
Asset Suite 5
MicroSCADA Pro SYS600 5
RTU500 series 4
FOX61x 4
TRMTracker 3
TropOS 4th Gen 3
TXpert Hub CoreTec 4 version 3
eSOMS 3
MSM 3
PCM600 2
TRO600 Series Firmware 2
NSD570 Teleprotection Equipment 2
Relion REB500 2
TRO600 2
Relion 670 Series 2
Relion 670/650 Series 2
Relion 670/650/SAM600-IO 2
Relion 650 2
GMS600 2
PWC600 2
MACH System Software 2
XCM20 2
XMC20 2
TXpert Hub CoreTec 4 2
Relion 670/650 and SAM600-IO 2
RTU500 Scripting Interface 1
PCM600 Update Manager 1
FOXCST 1
ECST 1
PROMOD V 1
Asset Suite 9 1
Lumada APM 1
MACH SCM Server 1
51 results · Clear filters · Feed
-
Medium 5.1
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServle…
-
Medium 6.5
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated…
-
Medium 5.9
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL…
-
Medium 4.6
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, …
-
Medium 6.9
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially cra…
-
Medium 4.4
A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious…
-
Medium 5.3
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via…
-
Medium 6.0
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log da…
-
Medium 6.5
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol …
-
Medium 6.5
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interfac…
-
Medium 6.5
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from…
-
Medium 6.1
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker t…
-
Medium 6.5
An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series devic…
-
Medium 6.5
A vulnerability exists in the media upload component of the Asset Suite versions listed below. If successfully exploite…
-
Medium 6.5
The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code i…
-
Medium 6.1
The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-si…
-
Medium 6.1
A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header valu…
-
Medium 6.5
A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that all…
-
Medium 4.9
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and aut…
-
Medium 4.4
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU applicat…
-
Medium 4.3
A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login informat…
-
Medium 5.3
A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, th…
-
Medium 4.3
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified …
-
Medium 4.1
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource th…
-
Medium 6.5
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrar…
-
Medium 5.7
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or fun…
-
Medium 6.9
If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccess…
-
Medium 6.8
Allow attackers to intercept or falsify data exchanges between the client and the server
-
Medium 6.8
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. …
-
Medium 5.3
REST service authentication anomaly with “valid username/no password” credential combination for batch job processing r…
-
Medium 4.5
A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED…
-
Medium 5.9
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions lis…
-
Medium 5.4
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor…
-
Medium 5.9
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incompl…
-
Medium 6.0
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor…
-
Medium 6.5
A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed b…
-
Medium 5.3
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, d…
-
Medium 5.3
The responses for web queries with certain parameters disclose internal path of resources. This information can be used…
-
Medium 5.3
The response messages received from the eSOMS report generation using certain parameter queries with full file path can…
-
Medium 6.5
The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on th…