ICS Advisory: Hitachi Energy Lumada APM Edge

Summary:

The document discusses a series of vulnerabilities found in Hitachi Energy's Lumada Asset Performance Management (APM) Edge products. The vulnerabilities, affecting versions 4.0 and prior, and version 6.3, have been assigned CVE IDs ranging from CVE-2022-4450 to CVE-2023-0286. These vulnerabilities can lead to denial-of-service conditions or the disclosure of sensitive information. The affected products are Lumada APM Edge versions 4.0 and prior, and version 6.3. Mitigation measures include updating to version 6.5.0.2 and later, as well as following recommended security practices and firewall configurations. The Computer Emergency Response Team (CERT) recommends users take defensive measures to minimize the risk of exploitation.