Hitachi Energy MicroSCADA System Data Manager SDM600

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA System Data Manager SDM600 Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Improper Authorization, Improper Resource Shutdown or Release, Improper...

CVE-2022-3686

creationtimestamp| type| source ---|---|--- 2023-03-28 16:44:38+00:00| seen| https://t.me/cibsecurity/60885...

CVE-2022-3686 SDM600 API permission check

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 Build Nr. 1.2.23000.291...

CVE-2022-3686 SDM600 API permission check

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 Build Nr. 1.2.23000.291...

CVE-2022-3686

CVE-2022-3686 affects Hitachi Energy SDM600 endpoints. The issue stems from API permission check (CWE-285) allowing an attacker to exploit by sending multiple parallel requests, which can render the SDM600 web services unresponsive. Affected versions are SDM600 prior to 1.2 FP3 HF4 (Build Nr. 1.2...