Hitachi Energy MicroSCADA Pro/X SYS600

🗓️ 21 Apr 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 234 Views

Hitachi Energy MicroSCADA Pro/X SYS600 vulnerabilities impacting versions 10.1.1 and prior, 9.4 FP1 through 10.2.1, and 10.0.0 through 10.2.1 including Observable Discrepancy, HTTP Request Smuggling, Classic Buffer Overflow, Improper Certificate Validation, Improper Restriction of Operations within the Bounds of a Memory Buffer, and Exposure of Sensitive Information to an Unauthorized Actor

Reporter	Title	Published	Views	Family All 1078
Rockylinux	nodejs:10 security update	7 Jul 202008:51	–	rocky
Rockylinux	nodejs:12 security update	7 Jul 202008:52	–	rocky
Rockylinux	nodejs:12 security and bug fix update	19 Oct 202007:13	–	rocky
Rockylinux	nodejs:10 security update	16 Feb 202107:34	–	rocky
Rockylinux	nodejs:12 security update	16 Feb 202107:34	–	rocky
Rockylinux	nodejs:14 security and bug fix update	16 Feb 202107:34	–	rocky
Rockylinux	postgresql:9.6 security update	9 Jun 202111:21	–	rocky
Rockylinux	postgresql:10 security update	9 Jun 202111:21	–	rocky
Rockylinux	postgresql:12 security update	10 Jun 202108:45	–	rocky
Rockylinux	postgresql:13 security update	10 Jun 202109:54	–	rocky

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-111-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-111-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

21 Apr 2022 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 3.13.7 - 8.8

CVSS 29.3

EPSS0.16296

SSVC