Skip to main content

CND News and Blog

New Vulnerabilities Tuesday 19 December


New Alerts for Hitachi Energy and Mozilla.

Hitachi Energy 

A vulnerability exists in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. CVSSv3 score of 7.4
More info.

A DoS vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500. Specially crafted messages are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU. CVSSv3 score of 5.9
More info.

Mozilla 

Mozilla has updated Firefox, Firefox ESR, and Thunderbird, updates rated High.
More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Sunday, 28 April 2024

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/