For awareness Low Check exposure in your normal cycle
Hitachi database, job-management and router products have security flaws
Canadian Centre for Cyber SecurityHitachi
What happened. The Canadian Cyber Centre says Hitachi products have vulnerabilities. The advisory lists HiRDB Server, JP1 job management products and TRO600 Series firmware prior to 9.2.2.1. It gives no CVE numbers or ratings.
Who is affected. Hitachi HiRDB Server versions 9 and 10, JP1 products including Base and Automatic Job Management System, and TRO600 Series firmware before 9.2.2.1.
What to do. Check whether you run the listed Hitachi products, then review the Hitachi vulnerability information and apply the necessary updates.
When to act. For awareness: no known exploitation and no score stated
Editor's reading
Forasset ownerIT security
- Purdue level
- L3
- L1
Why: HiRDB and JP1 are server software that typically sits in operations or business systems (L3), while TRO600 is network equipment placed near the field level.
- Are you exposed?
Search your asset inventory for HiRDB Server, JP1 products and TRO600 Series firmware older than 9.2.2.1.
- If you cannot fix it yet
- Restrict network access to HiRDB and JP1 servers to known management hosts.
- Place TRO600 routers behind a firewall and block management access from untrusted networks.
- Watch for
- Logons or connections to HiRDB and JP1 servers from unexpected hosts.
- Configuration changes or new administrative sessions on TRO600 devices.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Canadian Centre for Cyber Security (opens cyber.gc.ca)