Vulnerability · Published Feb 18, 2025 · Assigned by Hitachi
CVE-2024-57964Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
High 7.3
In plain English
A high-severity uncontrolled search path in HVAC Energy Saving Program from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 92.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi | HVAC Energy Saving Program | 0 – through * |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://www.hitachi.com/hirt/hitachi-sec/2025/001.html vendor-advisory