Information Disclosure Vulnerability in Hitachi Energy Products

CVE-2023-5516

Summary

An information disclosure vulnerability exists in various Hitachi Energy products due to poorly constructed web application requests and URI components containing special characters. This flaw triggers unhandled errors and exceptions, inadvertently revealing sensitive information including technical details such as version info, endpoint specifications, backend server data, and internal IP addresses. The exposure of this information can significantly increase the attack surface, potentially leading to further exploitation and additional vulnerabilities.

References