Coretec 4
Monthly
Authenticated users holding a privileged role in Hitachi Energy CoreTec 4 (3.0.0-3.4.0) and CoreTec 5 (3.0.0-5.0.0) can reach the configuration daemon's time-zone synchronization handler and inject operating-system commands, gaining full control over the device. The daemon builds a shell command from user-supplied time-zone input without any sanitization or validation (CWE-78), and the impact spans confidentiality, integrity and availability of the appliance itself. No public exploit code has been identified at time of analysis; exploitation requires valid credentials for an eligible role, and the vendor's high attack-complexity rating indicates an additional, undisclosed precondition.
Authenticated users holding a privileged role in Hitachi Energy CoreTec 4 (3.0.0-3.4.0) and CoreTec 5 (3.0.0-5.0.0) can reach the configuration daemon's time-zone synchronization handler and inject operating-system commands, gaining full control over the device. The daemon builds a shell command from user-supplied time-zone input without any sanitization or validation (CWE-78), and the impact spans confidentiality, integrity and availability of the appliance itself. No public exploit code has been identified at time of analysis; exploitation requires valid credentials for an eligible role, and the vendor's high attack-complexity rating indicates an additional, undisclosed precondition.