Hitachi Energy TRO600 series products
Summary
Hitachi Energy has identified multiple vulnerabilities in its TRO600 series products, specifically versions up to 9.2.1.6 and 9.1.1.0, and earlier. These vulnerabilities could allow for remote code execution and disclosure of sensitive information. A fix is available by updating to version 9.2.2.1.
IFF Assessment
The identified vulnerabilities in Hitachi Energy's TRO600 series products present a significant risk, enabling remote code execution and sensitive data disclosure, which are detrimental to defenders.
Severity
The CVSS score of 7.5 reflects the severity of vulnerabilities allowing an authenticated attacker to bypass network access restrictions and access services intended only for localhost, leading to unauthorized access and potential availability impact.
Defender Context
Defenders should prioritize patching or mitigating the identified vulnerabilities in Hitachi Energy TRO600 series products, especially in critical infrastructure environments. The potential for remote code execution necessitates careful network segmentation and access control to prevent further exploitation.