CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

🗓️ 07 Apr 2023 05:59:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 52 Views

CISA warns of ICS flaws in Hitachi, mySCADA, ICL, and Nexx product

Reporter	Title	Published	Views	Family All 104
0day.today	ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification Exploit	22 Feb 202200:00	–	zdt
0day.today	mySCADA MyPRO Authenticated Command Injection Exploit	29 Jul 202400:00	–	zdt
ATTACKERKB	CVE-2022-25359	26 Feb 202205:15	–	attackerkb
BDU FSTEC	The vulnerability of Hitachi Energy System Data Manager SDM600, related to the possibility of loading dangerous files, allows a hacker to execute arbitrary code.	30 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in the lack of measures to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system, related to insufficient verification of arguments transmitted in commands, allows a perpetrator to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of the programmable logic controller ScadaFlex II SCADA Controller SC-1/SC-2 lies in the absence of authentication procedures, allowing unauthorized access to the device without being authenticated.	11 May 202300:00	–	bdu_fstec

08 Apr 2023 04:44Current

9.9High risk

Vulners AI Score9.9

CVSS 26.4

CVSS 3.19.9 - 10

EPSS0.4481

SSVC

cisa advisories hitachi energy myscada technologies industrial control links nexx cve-2022-3682 cve-2023-28400 cve-2023-28716 cve-2023-28384 cve-2023-29169 cve-2023-29150 cve-2022-25359 cve-2023-1748 sam sabetan network isolation firewalls security risks.