CVE-2024-2244: Hitachi Energy Asset Suite Eam

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation. The anomaly doesn’t exist with other credential combinations.

Affected products

• Hitachi Energy Asset Suite Eam: from 9.6.3.0, before 9.6.3.13 (fixed in 9.6.3.13); from 9.6.4.0, before 9.6.4.1 (fixed in 9.6.4.1)
• Hitachienergy Asset Suite: from 9.6.3.0, before 9.6.3.13 (fixed in 9.6.3.13); from 9.6.4.0, before 9.6.4.1 (fixed in 9.6.4.1)

Published 2024-03-27. Last modified 2026-06-17.