Hitachienergy Asset Suite vulnerabilities

3 CVEs affecting Hitachienergy Asset Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2244, published 2024-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18998, published 2020-02-17. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An…
CVE-2023-4816, published 2023-09-11. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated…
CVE-2024-2244, published 2024-03-27. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation. The anomaly doesn’t exist with other…