Description
Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | Retail Operations | 5.7.3 – < 5.7.3.1 | 5.7.3.1 |
| Hitachi Energy | Counterparty Settlement and Billing (CSB) | 5.7.3 – < 5.7.3.1 | 5.7.3.1 |
Advisories 1
- ICSA-21-334-05 Hitachi Energy Retail Operations and CSB Software CISA ICS & IT advisories · Nov 30, 2021