Authentication flaw

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...

Directory traversal

Hitachi Kokusai Electric Newtork products for monitoring system Camera, Decoder and Encoder and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue...

CVE-2022-37681

Hitachi Kokusai Electric Newtork products for monitoring system Camera, Decoder and Encoder and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue...

CVE-2022-37680

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...

CVE-2022-37680

CVE-2022-37680 affects Hitachi Kokusai Electric Network products’ monitoring system (Camera, Decoder, Encoder). An improper authentication flaw allows remote reboot via a crafted POST to /ptipupgrade.cgi. Impact is high (NVD/Hitachi metrics: availability loss). Remediation is to apply fixes under...

CVE-2022-37681

CVE-2022-37681 affects Hitachi Kokusai Electric network cameras (ISnex HC-IP9100HD and HC-IP9050HD) with a directory traversal in the /ptippage.cgi endpoint. Root cause: insufficient restriction of the requested path, enabling an attacker to traverse directories. Affected: HC-IP9100HD version 1.0...

Hitachi Kokusai Electric ISnex HC-IP9100HD 访问控制错误漏洞

The Hitachi Kokusai Electric ISnex HC-IP9100HD is a network camera from Hitachi, Japan. A security vulnerability exists in Hitachi Kokusai Electric ISnex HC-IP9100HD version 1.07 and earlier versions, which stems from an access control issue. An attacker exploiting this vulnerability could remote...

PT-2022-4498 · Hitachi +1 · Hitachi Kokusai Electric Network Products +2

Name of the Vulnerable Software and Affected Versions: Hitachi Kokusai Electric Network products versions prior to the fixed version ISnex HC-IP9100HD version 1.07 and below ISnex HC-IP9050HD version not specified Description: The issue is related to improper authentication for critical functions...

CISA Releases 12 Industrial Control Systems Advisories

CISA has released 12 Industrial Control Systems ICS advisories on August 30, 2022. These advisories provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

PT-2022-4503 · Hitachi Kokusai Electric +1 · Hitachi Kokusai Electric Network Products +2

Name of the Vulnerable Software and Affected Versions: Hitachi Kokusai Electric Newtork products versions prior to the fixed version ISnex HC-IP9100HD version 1.07 and below ISnex HC-IP9050HD version not specified Description: The issue is related to the /ptippage.cgi component of the network...

Hitachi Kokusai Electric ISnex HC-IP9100HD 路径遍历漏洞

The Hitachi Kokusai Electric ISnex HC-IP9100HD is a network camera from Hitachi, Japan. A path traversal vulnerability exists in Hitachi Kokusai Electric ISnex HC-IP9100HD version 1.07 and earlier. An attacker exploits this vulnerability to perform directory traversal via a specially crafted GET...

Hitachi Energy RTU500 series CMU firmware buffer overflow vulnerability

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A buffer overflow vulnerability exists in the Hitachi Energy RTU500 series CMU firmware HCI Modbus TCP function. The vulnerability, which originates when HCI Modbus TCP is enabled a...

Hitachi Energy RTU500 安全漏洞

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A buffer overflow vulnerability exists in the Hitachi Energy RTU500 series CMU firmware HCI Modbus TCP function. The vulnerability, which originates when HCI Modbus TCP is enabled a...

PT-2022-4414 · Hitachi Energy · Rtu500

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 versions affected versions not specified Description: The issue is related to a vulnerability in the HCI interface, functioning via the Modbus TCP protocol, which can cause a buffer overflow in memory. This can be...

Hitachi Energy RTU500

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 Series Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send a specially crafted...

Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator

Overview Information Disclosure Vulnerability have been found in Hitachi Automation Director and Hitachi Ops Center Automator. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40335

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40335

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...