Hitachi Energy vulnerabilities
118 CVEs and advisories name Hitachi Energy as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-1718An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to im
- CVE-2025-2500A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below.
- CVE-2025-1484A vulnerability exists in the media upload component of the Asset Suite versions listed below.
- CVE-2025-27631The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execu
- CVE-2025-27633The TRMTracker web application is vulnerable to reflected Cross-site scripting attack.
- CVE-2025-1445A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61
- CVE-2025-27632A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request
- CVE-2024-12169A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker perfo
- CVE-2024-11499A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to p
- CVE-2024-10037A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially cr
- CVE-2024-9929A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps.
- CVE-2024-9928A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts.
- CVE-2024-41156Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats.
- CVE-2024-41153Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system comm
- CVE-2024-7941An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL.
- CVE-2024-7940The product exposes a service that is intended for local only to all network interfaces without any authentication.
- CVE-2024-3982An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and
- CVE-2024-3980The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesyst
- CVE-2024-4872A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product.
- CVE-2024-28020A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management.
- CVE-2024-28024A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessib
- CVE-2024-28022A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentic
- CVE-2024-28023A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unint
- CVE-2024-28021A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation.
- CVE-2024-2011A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can
- CVE-2024-2012vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or cod
- CVE-2024-2013An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers withou
- CVE-2024-2461If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible
- CVE-2024-2462Allow attackers to intercept or falsify data exchanges between the client and the server
- CVE-2024-2378A vulnerability exists in the web-authentication component of the SDM600.