[Control systems] Hitachi Energy security advisory (AV23-195)

Serial number: AV23-195
Date: April 11, 2023

On April 6, 2023, CISA published an ICS Advisory to address vulnerabilities in the following product:

• MicroSCADA System Data Manager SDM600 – versions prior to v1.2 FP3 HF4 (Build Nr. 1.2.23000.291) and prior to v1.3.0 (Build Nr. 1.3.0.1339)

Exploitation of these vulnerabilities could lead to arbitrary code execution, information disclosure, privilege escalation or denial of service.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

• ICS Advisory - ICSA-23-096-05