Hitachi Energy Asset Suite (Update A)

🗓️ 30 Sep 2025 08:50:13Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 1 Views

Risk permits content manipulation or data injection in Hitachi Energy Asset Suite; apply isolation per CISA guidance.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-10217	9 Oct 202510:00	–	circl
CNNVD	Hitachi Energy Asset Suite 安全漏洞	30 Sep 202500:00	–	cnnvd
CVE	CVE-2025-10217	30 Sep 202512:10	–	cve
Cvelist	CVE-2025-10217	30 Sep 202512:10	–	cvelist
EUVD	EUVD-2025-31726	3 Oct 202520:07	–	euvd
NVD	CVE-2025-10217	30 Sep 202513:15	–	nvd
Positive Technologies	PT-2025-39981	30 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-10217	2 Oct 202520:39	–	redhatcve
Vulnrichment	CVE-2025-10217	30 Sep 202512:10	–	vulnrichment

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-282-01.json
publisher	www.publisher.hitachienergy.com/preview
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-282-01
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b

30 Sep 2025 08:50Current

6.7Medium risk

Vulners AI Score6.7

CVSS 46

EPSS0.00066

SSVC

content manipulation data injection Hitachi Asset Suite network isolation virtual private network defense in depth industrial control systems cybersecurity guidance social engineering