Vulnerability · Published Sep 30, 2025 · Assigned by Hitachi Energy
CVE-2025-10217
Medium 6.0
In plain English
A medium-severity security flaw in Asset Suite from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while resolving application performance related issues.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | Asset Suite | 9.0 – through 9.8 |
Weakness: CWE-117 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N