Vulnerability · Published Mar 27, 2024 · Assigned by Hitachi Energy
CVE-2024-2244
Medium 5.3
In plain English
A medium-severity improper authentication in Asset Suite EAM from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 68.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation. The anomaly doesn’t exist with other credential combinations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | Asset Suite EAM | 9.6.3.0 – before 9.6.3.139.6.4.0 – before 9.6.4.1 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N