QID 591151

Date Published: 2022-11-04

QID 591151: Hitachi Energy AFS660/AFS665 Vulnerability (ICSA-22-270-01,8DBD000122)

AFFECTED PRODUCTS
Hitachi Energy reports this vulnerability affects the following AFS660/AFS665 industrial switches: Releases 7.0.02 or prior

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version of using passive scanning

Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer and fully compromise the target device.

  • CVSS V3 rated as Critical - 9.8 severity.
  • CVSS V2 rated as High - 7.5 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section icsa-22-270-01 for affected packages and patching details.

    Vendor References

    CVEs related to QID 591151

    Software Advisories
    Advisory ID Software Component Link
    icsa-22-270-01 URL Logo www.cisa.gov/uscert/ics/advisories/icsa-22-270-01