CISA has republished a vendor advisory detailing two vulnerabilities in Hitachi Energy CoreTec products. The issues include an OS command injection flaw and a Dirty Frag vulnerability affecting specific versions of CoreTec5 and CoreTec4. Successful exploitation could compromise the confidentiality, integrity, and availability of the affected equipment. The advisory recommends updating to CoreTec5 version 5.0.0 to remediate the issues. These vulnerabilities were reported by researchers from the Cybersecurity Research group at Hitachi India R&D Center.
Read the full story at cisa.gov.
Photo: Tama66 / Pixabay
