SDM600 endpoint vulnerability

CVE-2022-3684

What is CVE-2022-3684?

A denial of service vulnerability has been identified in the SDM600 endpoint by Hitachi Energy. The exploit occurs when an attacker sends multiple parallel requests, causing the SDM600 web services to become overburdened and eventually unresponsive. This vulnerability affects all SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291). It is crucial for organizations using these systems to evaluate their security posture and apply the necessary updates to mitigate potential disruptions.

References