CVE-2024-2378: Hitachi Energy SDM600

High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations.

Affected products

• Hitachi Energy SDM600: from 1, before 1.3.4 (fixed in 1.3.4)
• Hitachienergy SDM600: from 1.0, before 1.3.4.572 (fixed in 1.3.4.572)

Published 2024-04-30. Last modified 2026-06-17.