SDM600 API web services authorization validation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having access to sensitive data. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291) List of CPEs: • cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:* • cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:*
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Hitachi Energy SDM600
From SDM600 1.2; From SDM600 1.1; From SDM600 1.0