by Kastro
Paper/Archive/CVE-2025-2500

CVE-2025-2500

Hitachi Energy Asset Suite — A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below.

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
34
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 32.7.327 × 206.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.

Affected

ProductAffectedFixed inSource
Asset Suite9.6.4.4–CNA
Asset Suite9.7–CNA

Scores by source

Hitachi Energy (CNA)9.1CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Hitachi Energy (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refpublisher.hitachienergy.com/preview?DocumentID=8DBD000212&LanguageCode=en&DocumentPartId=&Action=Launch