CVE-2023-3495

CVE-2023-3495 affects Hitachi EH-VIEW (KeypadDesigner). The issue is an out-of-bounds write enabling local attackers to potentially execute arbitrary code, with exploitation requiring user interaction (opening a malicious file). The affected products are noted as no longer supported by the mainta...

CVE-2023-3495 Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)

UNSUPPORTED WHEN ASSIGNED Out-of-bounds Write vulnerability in Hitachi EH-VIEW KeypadDesigner allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOT...

Hitachi EH-VIEW 缓冲区错误漏洞

Hitachi EH-VIEW is a data visualization and analytics platform from Hitachi, Japan, focused on helping organizations turn data into actionable insights. The goal of this platform is to help organizations better understand their data through visualization, analytics, and reporting tools to make mo...

PT-2023-25072 · Hitachi · Hitachi Eh-View

Name of the Vulnerable Software and Affected Versions: Hitachi EH-VIEW KeypadDesigner affected versions not specified Description: The issue is an Out-of-bounds Write vulnerability that allows local attackers to potentially execute arbitrary code on affected installations. User interaction is...

Hitachi EH-VIEW 缓冲区错误漏洞

Hitachi EH-VIEW is a data visualization and analytics platform from Hitachi, Japan, focused on helping organizations turn data into actionable insights. The goal of this platform is to help organizations better understand their data through visualization, analytics, and reporting tools to make mo...

Hitachi EH-VIEW 缓冲区错误漏洞

Hitachi EH-VIEW is a data visualization and analytics platform from Hitachi, Japan, focused on helping organizations turn data into actionable insights. The goal of this platform is to help organizations better understand their data through visualization, analytics, and reporting tools to make mo...

Hitachi EH-VIEW 缓冲区错误漏洞

Hitachi EH-VIEW is a data visualization and analytics platform from Hitachi, Japan, focused on helping organizations turn data into actionable insights. The goal of this platform is to help organizations better understand their data through visualization, analytics, and reporting tools to make mo...

Hitachi Energy AFF66x

1. EXECUTIVE SUMMARY ​CVSS v3 9.6 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Hitachi Energy ​Equipment: AFF66x ​Vulnerabilities: Cross-site Scripting, Use of Insufficiently Random Values, Origin Validation Error, Integer Overflow or Wraparound, Uncontrolled Resource...

PT-2023-27192 · Hitachi · Hitachi Eh-View

Name of the Vulnerable Software and Affected Versions: Hitachi EH-VIEW Designer affected versions not specified Description: The issue is an Out-of-bounds Read vulnerability that allows local attackers to potentially disclose information on affected installations. User interaction is required to...

PT-2023-27191 · Hitachi · Hitachi Eh-View

Name of the Vulnerable Software and Affected Versions: Hitachi EH-VIEW Designer affected versions not specified Description: An Out-of-bounds Write vulnerability in Hitachi EH-VIEW Designer allows local attackers to potentially execute arbitrary code on affected installations. User interaction is...

The vulnerability of the HCI interface, which operates according to the IEC 60870-5-104 standard, and the programmable logic controllers Hitachi Energy RTU500, allows a intruder to trigger a service failure.

The vulnerability of the HCI interface, which operates according to the IEC 60870-5-104 standard, in the Hitachi Energy RTU500 programmable logic controllers is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the HCI interface, which operates according to the IEC 60870-5-104 standard, and the programmable logic controllers Hitachi Energy RTU500, allows a intruder to trigger a service failure.

The vulnerability of the HCI interface, which operates according to the IEC 60870-5-104 standard, in the Hitachi Energy RTU500 programmable logic controllers is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on August 8, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-220-01 Schneider Electric IGSS ICSA-23-220-02 Hitachi Energy RTU500 series CISA encourag...

Hitachi Energy RTU500 series

1. EXECUTIVE SUMMARY ​CVSS v3 7.5 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Hitachi Energy ​Equipment: RTU500 series ​Vulnerabilities: Stack-based Buffer Overflow 2. RISK EVALUATION ​Successful exploitation of these vulnerabilities could cause a buffer overflow and reboot of...

Hitachi Energy RTU500 输入验证错误漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in the Hitachi Energy RTU500 Series that stems from a lack of input data validation, resulting in a buffer overflow vulnerability in the HCI IEC 60870-5-104 functio...

Hitachi Energy RTU500 缓冲区错误漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in the Hitachi Energy RTU500 Series that stems from a stack overflow vulnerability in the HCI IEC 60870-5-104 function...

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system allow attackers to gain unauthorized access to protected information.

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system are related to the transmission of data in an unencrypted form. Exploiting these vulnerabilities can allow a malicious actor to gain unauthorized access ...

The vulnerability of the Hitachi Replication Manager (HRpM) platform, related to the failure to take measures to neutralize special elements used in the expression language of the operator, allows a perpetrator to execute arbitrary code.

The vulnerability of the Hitachi Replication Manager HRpM platform relates to the failure to take measures to neutralize special elements used in the expression language. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of components such as Device Manager Server, Hitachi Tuning Manager server, Hitachi Tuning Manager – Agent for RAID, Hitachi Tuning Manager – Agent for NAS, Hitachi Device Manager, Hitachi Tiered Storage Manager, and Hitachi Tuning Manager (HTnM) allow attackers to gain access to read, modify, or delete data.

The vulnerabilities of Device Manager Server, Hitachi Tuning Manager server, Hitachi Tuning Manager – Agent for RAID, Hitachi Tuning Manager – Agent for NAS, Hitachi Device Manager, Hitachi Tiered Storage Manager, and Hitachi Tuning Manager HTnM are related to errors in the use of standard...

PT-2023-5924 · Hitachi +3 · Hitachi Jp1/Performance Management - Remote Monitor For Oracle +29

Name of the Vulnerable Software and Affected Versions: Hitachi JP1/Performance Management - Manager versions 09-00 through 12-50-06 Hitachi JP1/Performance Management - Base versions 09-00 through 10-50- Hitachi JP1/Performance Management - Agent Option for Application Server versions 11-00 throu...