Design/Logic Flaw

A vulnerability exists in the Intelligent Electronic Device IED Connectivity Package ConnPack credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in the PCM600 database. An attacker who manag...

CVE-2022-2513

Summary: CVE-2022-2513 affects Hitachi Energy’s PCM600 and related IED ConnPack packages where credentials are stored in cleartext in the PCM600 database and logs. The root cause is cleartext credential storage, enabling credential disclosure if an attacker obtains exported backups or has admin a...

PT-2022-17086 · Hitachi Energy · Pcm600

Name of the Vulnerable Software and Affected Versions: Hitachi Energy’s PCM600 product affected versions not specified Description: A vulnerability exists in the Intelligent Electronic Device IED Connectivity Package ConnPack credential storage function, where IEDs credentials are stored in a...