Hitachi Energy SDM600

• CVE-2024-2378 High 8.0 A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations. 0.2%
• CVE-2024-2377 High 7.6 A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensiti 0.2%
• CVE-2022-3685 High 7.5 SDM600 software privilege level 0.3%
• CVE-2022-3686 Medium 4.8 SDM600 API permission check 1.4%
• CVE-2022-3684 High 7.5 SDM600 endpoint vulnerability 0.6%
• CVE-2022-3683 High 7.7 SDM600 API web services authorization validation 0.5%
• CVE-2022-3682 Critical 9.9 SDM600 file permission validation 0.8%