Unauthorized Access Vulnerability in Asset Suite by Hitachi Energy
CVE-2025-2500

9.1CRITICAL

Key Information:

Vendor

Hitachi
Status
Asset Suite
Vendor
CVE Published:
30 May 2025

What is CVE-2025-2500?

A vulnerability in the SOAP Web services of Asset Suite allows for unauthorized access, enabling potential attackers to exploit this flaw. If an attack is carried out, it could create an opportunity for malicious behavior, such as extending the time window for password attacks. This weakness poses a risk to the integrity and security of the affected products, demanding immediate attention from those utilizing Asset Suite.

Affected Version(s)

Asset Suite 9.6.4.4

Asset Suite 9.7

References

https://publisher.hitachienergy.com/preview?DocumentID=8D...

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-2500 : Unauthorized Access Vulnerability in Asset Suite by Hitachi Energy