Hitachi Energy MicroSCADA System Data Manager SDM600

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA System Data Manager SDM600 Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Improper Authorization, Improper Resource Shutdown or Release, Improper...

CVE-2022-3685 SDM600 software privilege level

A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SDM600 versions prior to version 1.3.0. List of CPEs:...

CVE-2022-3685

CVE-2022-3685 affects Hitachi Energy SDM600 software prior to 1.3.0. The root cause is operation at a privilege level higher than required, enabling privilege escalation. Affected versions include SDM600 up to 1.3.0 (various 1.2.x builds and 1.0/1.1). Remediation provided in the sources is to upg...