Hitachi Coding Software Suite EUVD-2026-90493

Exploitation requires the attacker to intercept network traffic generated by Hitachi Coding Software Suite (versions through 3.3.0) while it transmits credentials and sensitive data without encryption. The limiting factor is obtaining an on-path/network-adjacent position (same LAN segment, compromised switch/router, MITM, or rogue access point) to observe the plaintext; the flaw is passive and does not grant code execution, only disclosure. Risk is highest where the software communicates across untrusted, shared, or wireless network segments and lowest where traffic is confined to an isolated, switched, or separately-encrypted (VPN/TLS-tunneled) industrial network.

This is a cleartext-transmission flaw (CWE-319) in Hitachi Coding Software Suite through 3.3.0 that exposes authentication credentials and other sensitive data in transit. The vendor's CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H only) yields 8.7 (High), driven entirely by confidentiality - there is no integrity or availability impact and no scope change. However, the AV:N/AC:L rating sits in tension with the described attack: eavesdropping on data in transit realistically requires the attacker to occupy a privileged network position (MITM, ARP spoofing, rogue AP, or a tap on the LAN segment), which is closer to adjacent access with meaningful complexity than to trivial remote interception - verify interception feasibility with the vendor, as the practical barrier is higher than the 8.7 implies. No EPSS score, no CISA KEV listing, and no public exploit were provided, so there is no public exploit identified at time of analysis and no evidence of active exploitation; SSVC framework data was not supplied. Net: a genuine credential-exposure risk in the specific deployments where the software transmits over untrusted or shared network segments, but the real-world priority is tempered by the niche, industrial footprint and the need for an on-path position rather than this being a mass-exploitable remote issue.

An attacker positioned on the same network segment as a host running Hitachi Coding Software Suite (e.g. a factory-floor LAN or shared switch) passively captures traffic between the software and its backend or device, recovering plaintext authentication credentials and sensitive operational data. The harvested credentials can then be replayed to authenticate to the application or associated industrial equipment. No public exploit code is required - standard packet-capture tooling suffices.