#ABB POWER GRIDS UPDATE#

Follow security practices as defined in SDM600 security deployment guideline and firewall configurations to help protect process control networks from attacks that originate from outside the network.Implement and continuously revise least privileges principles to minimize permissions and accesses to SDM600 related resources.Hitachi ABB Power Grids also recommends the following general security mitigations: After successful upgrade, Hitachi ABB Power Grids recommends moving previously created vulnerable backups to a secure location to avoid unauthorized access. Users can download the latest SDM600 version from the product website. 2.257) or newer at the earliest convenience.

#ABB POWER GRIDS UPDATE#

Hitachi ABB Power Grids recommends users apply update Version 1.2 FP2 HF6 (Build Nr. Hitachi ABB Power Grids reported this vulnerability to CISA.

COMPANY HEADQUARTERS LOCATION: Switzerland.

CRITICAL INFRASTRUCTURE SECTORS: Energy.

A CVSS v3 base score of 6.3 has been calculated the CVSS vector string is ( AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L). A local operating system user can modify backup files, which may allow an attacker to overwrite system configuration files and gain privileges.ĬVE-2021-35526 has been assigned to this vulnerability. The application does not encrypt backup files.

2.257)ģ.2 VULNERABILITY OVERVIEW 3.2.1 CLEARTEXT STORAGE OF SENSITIVE INFORMATION CWE-312 SDM600: All versions prior to 1.2 FP2 HF6 (Build Nr.The following versions of System Data Manager are affected: Successful exploitation of this vulnerability could allow an attacker access to sensitive information. Vulnerability: Cleartext Storage of Sensitive Information.

Abb power grids