Hitachi Energy Alert
2963Warning Date
Severity Level
Warning Number
Target Sector
31 August, 2022
● High
2022-5181
Energy
Hitachi Energy has released security updates to address a vulnerability in the following products:
- RTU500 series in which HCI Modbus TCP
- RTU500 series CMU Firmware version 12.0.*
- RTU500 series CMU Firmware version 12.2.*
- RTU500 series CMU Firmware version 12.4.*
- RTU500 series CMU Firmware version 12.6.*
- RTU500 series CMU Firmware version 12.7.*
- RTU500 series CMU Firmware version 13.2.*
- MSM
- MSM version 2.2 and earlier.
- GWS
- GWS 2.0.0.0 and earlier
- GWS 2.1.0.0
- GWS 2.2.0.0
- GWS 2.3.0.0
- GWS 2.4.0.0
- GWS 3.0.0.0
- GWS 3.1.0.0.
- FACTS Control Platform (FCP)
- FCP 1.1.0 - 1.3.0
- FCP 2.1.0 - 2.3.0
- FCP 3.0.0 - 3.12.0
Attacker could exploit this vulnerability by doing the following:
- Denial of service attack (DoS)
- Sensitive information disclosure
- Buffer overflow
The CERT team encourages users to review Hitachi Energy security advisory and apply the necessary updates: