SDM600 software privilege level

CVE-2022-3685

What is CVE-2022-3685?

A privilege escalation vulnerability exists in Hitachi Energy's SDM600 software, which operates at a higher privilege level than necessary. An attacker can exploit this flaw to gain elevated access within the system. This vulnerability impacts all versions prior to 1.3.0, allowing unauthorized actions in sensitive areas of the software environment. It is crucial for users to upgrade to the latest version to mitigate potential risks.

References