Hitachi Energy System Data Manager

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic or to cause a denial-of-service condition.

CVEs (7)

Remediations

• The vulnerabilities are remediated as of the following product Version SDM600 Version 1.2 FP2 HF10 (Build Nr. 1.2.14002.506). Hitachi Energy recommends users apply the update at the earliest convenience from the SDM600 product website.
• Implement and continuously revise least privileges principles to minimize permissions and accesses to SDM600 related resources.
• Follow security practices as defined in SDM600 security deployment guideline and firewall configurations to help protect process control networks from attacks that originate from outside the network. Such practices include that process control systems are: Physically protected from direct access by unauthorized personnel. Not directly connected to the Internet. Separated from other networks by means of a firewall system that has a minimal number of ports exposed. Not used for Internet surfing instant messaging or receiving e-mails.
• Carefully scan portable computers and removable storage media for viruses before connecting to a control system.
• For additional information, see the Hitachi Energy security advisory.

Affected Vendors

Affected Products (1)

Affected Sectors

Energy