PT-2022-17086 · Hitachi Energy · Pcm600

Published 2022-11-22 · Updated 2024-05-28 · CVE-2022-2513

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitachi Energy’s PCM600 product (affected versions not specified)

Description A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function, where IEDs credentials are stored in a cleartext format in the database and logs files. An attacker having access to the exported backup file can exploit the vulnerability and obtain user credentials of the IEDs. Additionally, an attacker with administrator access to the host machine can obtain other user credentials by analyzing database log files. The credentials may be used to perform unauthorized modifications such as loading incorrect configurations, rebooting the IEDs, or causing a denial-of-service on the IEDs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2022-2513

Affected Products

Pcm600

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-2513 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2513 · Vendor Advisory
• https://t.me/cvenotify/38213 · Telegram Post
• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000120&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/cvenotify/38813 · Telegram Post
• https://t.me/cvenotify/81119 · Telegram Post