Description
The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | TRMTracker | 6.2 – ≤ 6.2.04, 6.3 – ≤ 6.3.01 | — |
Advisories 1
- ICSA-25-093-02 Hitachi Energy TRMTracker CISA ICS & IT advisories · Mar 25, 2025