Rewterz
Rewterz Threat Advisory – Microsoft MSHTML Remote Code Execution Vulnerability
September 7, 2021
Rewterz
Rewterz Threat Advisory – CVE-2021-3766 – Node.js Security Vulnerability
September 8, 2021

Rewterz Threat Advisory – ICS : Hitachi ABB Power Grids System Data Manager

Severity

High

Analysis Summary

CVE-2021-35526

The application does not encrypt backup files. A local operating system user can modify backup files, which may allow an attacker to overwrite system configuration files and gain privileges.

Impact

  • Exposure of Sensitive Data

Affected Vendors

  • Hitachi ABB Power Grids

Affected Products

  • SDM600: All versions prior to 1.2 FP2 HF6

Remediation

Refer to Cert-Cisa Advisory for the patch, upgrade, or suggested workaround information.

https://us-cert.cisa.gov/ics/advisories/icsa-21-250-02