CISA has issued an advisory for critical vulnerabilities in Hitachi Energy CoreTec products. These flaws could allow attackers to compromise system confidentiality, integrity, and availability through remote command execution and privilege escalation.
- OS Command Injection (CVE-2026-13162): Authenticated users with certain roles can execute arbitrary system commands with full device control via improper timezone configuration handling.
- Dirty Frag (CVE-2026-43284): Local unprivileged users can escalate privileges to root by exploiting a Linux kernel vulnerability in the IPsec ESP subsystem.
Both vulnerabilities affect CoreTec5 versions up to 3.4.0 and CoreTec4 versions up to 3.4.0. The advisory specifies that updating to CoreTec5 version 5.0.0 resolves both issues.
Hitachi Energy has confirmed these vulnerabilities impact critical infrastructure in the energy sector globally. The company headquarters are located in Switzerland.
Recommended next steps: Update to CoreTec5 version 5.0.0 for all affected products. Organizations should also implement network segmentation and restrict remote access to control systems.
What remains unknown: The exact attack surface and exploitation methods for the Dirty Frag vulnerability in real-world environments are not fully detailed in this advisory.
Official source: Hitachi Energy CoreTec Product (2026-10-29T12:00:00.000Z). Yarvico provides independent educational analysis.
No comments:
Post a Comment