Hitachi Energy AFS/AFR Series Products

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition.

CVEs (4)

Remediations

• Hitachi Energy has released the following mitigations/fixes:
• AFS650: Update to AFS 650 firmware version 9.1.10
• AFS660-C, AFS665-B, AFS670-V2: Update to AFS 66x firmware version 7.1.08
• AFS670/675/677, AFR677: Update to AFS/AFR 67x firmware version 9.1.10
• In addition, recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
• For more information, see Hitachi Energy's Cybersecurity Advisory.

Affected Vendors

Affected Products (8)

Affected Sectors

Energy