Hitachi Energy AFF66x

🗓️ 22 Aug 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 66 Views

Hitachi Energy AFF66x: Cross-site Scripting, Insufficiently Random Values, Origin Validation Error, Integer Overflow, Uncontrolled Resource Consumptio

Reporter	Title	Published	Views	Family All 876
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by TCP denial of service vulnarabilities	5 Nov 201922:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-11868, CVE-2020-13817)	8 Jul 202117:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by Denial of Service vulnerabilities	8 Jun 202121:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in the Linux kernel affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Network Time Protocol (NTP) vulnerabilities (CVE-2020-11868, CVE-2020-13817)	27 Nov 202002:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak System addressed vulnerabilities (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)	31 Dec 202015:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-18066)	23 Jul 202021:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Network Time Protocol (NTP)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-234-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-234-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

22 Aug 2023 06:00Current

8.8High risk

Vulners AI Score8.8

CVSS 27.8

CVSS 37.5

CVSS 3.19.6

EPSS0.74296

SSVC