Hitachi Energy warns of unauthenticated access flaw in Asset Suite
Hitachi Energy has reported unauthenticated servlet access vulnerabilities in its Asset Suite software that can compromise confidentiality, integrity, and system availability.
FTMQ Security, written by our newsroom0 views
Hitachi Energy issued a security alert regarding unauthenticated servlet access vulnerabilities affecting its Asset Suite software. CISA Alerts reported that hackers could exploit these vulnerabilities to impact the confidentiality, integrity, and availability of affected systems. [1]
The security flaw specifically involves the HTTPPublishAdapterTestServlet component, which was originally intended for testing purposes. Unauthenticated users are able to access this servlet without proper authorization checks. [1]
Hitachi was founded in 1910 by engineer Namihei Odaira as an electrical machinery manufacturing unit before becoming an independent business in 1920. The Japanese multinational conglomerate is headquartered in Tokyo. [2]
Hitachi Energy advises organizations to update or upgrade to Asset Suite version 9.9.1 as soon as it becomes available. As an immediate mitigation step, administrators should disable the affected test servlet. [1]
In short
- Unauthenticated servlet access vulnerabilities affect Hitachi Energy Asset Suite.
- The flaw impacts the HTTPPublishAdapterTestServlet component intended for testing.
- Hitachi Energy recommends upgrading to Asset Suite 9.9.1 or disabling the servlet.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Hitachi Energy Asset SuiteCISA Alerts, 1d ago (the report this story comes from)
Background
- [2]Hitachi on Wikipedia
Our newsroom writes these reports with the help of software, from the 2 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
More in Threat Intelligence
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.