Advisories · Technology
Hitachi Industrial Equipment Systems Hitachi Coding Software Suite.
Every CVE that names Hitachi Industrial Equipment Systems Hitachi Coding Software Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- Authentication bypass
- CVSS 8.7 High
Authentication information or sensitive data may be intercepted in transit
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- Hard-coded credentials
- CVSS 8.7 High
Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- CWE-912