Hitachi Energy AFS, AFR and AFF Series

🗓️ 16 Dec 2025 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 1 Views

Risk of data integrity loss and disruption; use network isolation, firewalls, and VPNs.

Reporter	Title	Published	Views	Family All 291
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by multiple Vulnerabilities	15 Mar 202510:43	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.	28 Apr 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	10 Oct 202514:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Network Automation	3 May 202522:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Base OS issues	2 Apr 202517:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	21 Jan 202520:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for Jan 2025 - Multiple CVEs addressed	30 Mar 202513:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to Kerberos 5, OpenSSL, libexpat, golang-jwt, and GnuPG Libgcrypt	6 Dec 202412:00	–	ibm
GithubExploit	Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius	30 Mar 202613:09	–	githubexploit

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-350-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-350-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

16 Dec 2025 07:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.19

EPSS0.22611

SSVC

Hitachi Energy AFS series AFR series AFF series Vulnerability Risk evaluation Defense in depth Network isolation Firewalls Virtual private network Remote access Social engineering Phishing Control systems security