SDM600 software privilege level
CVE-2022-3685

7.5HIGH

Key Information:

Vendor

Hitachi
Status
Sdm600
Vendor
CVE Published:
28 March 2023

What is CVE-2022-3685?

A privilege escalation vulnerability exists in Hitachi Energy's SDM600 software, which operates at a higher privilege level than necessary. An attacker can exploit this flaw to gain elevated access within the system. This vulnerability impacts all versions prior to 1.3.0, allowing unauthorized actions in sensitive areas of the software environment. It is crucial for users to upgrade to the latest version to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SDM600 SDM600 1.3

SDM600 SDM600 1.2

SDM600 SDM600 1.1

References

https://search.abb.com/library/Download.aspx?DocumentID=8...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.