Tro600 Series Firmware
Monthly
Unauthenticated arbitrary file read in Hitachi Energy TRO600 Series firmware 9.0.0.0 through 9.1.1.0 lets remote attackers with network reachability to the device's management interface disclose sensitive files, including configuration and password data. The flaw is a missing-authentication condition (CWE-306) with confidentiality-only impact, and the available intelligence does not confirm active exploitation; no public exploit identified at time of analysis. Risk is real within the product's deployment niche but bounded by footprint and exposure.
Authenticated users of Hitachi Energy TRO600 series devices can abuse the product's port-forwarding capability to reach services that are bound only to localhost, bypassing the network access restrictions that are supposed to keep those services unreachable from the network. Successful tunnelling gives the attacker access to sensitive local functionality and confidential information, and the flaw also carries an availability impact; all firmware versions from 9.0.0.0 through 9.2.1.6 are listed as affected. Exploitation requires a valid authenticated session (CVSS PR:L) and conditions outside the attacker's full control (AC:H, AT:P), no public exploit has been identified at time of analysis, and the vendor's priority guidance places this in the moderate, address-this-week band rather than an emergency.
Unauthenticated arbitrary file read in Hitachi Energy TRO600 Series firmware 9.0.0.0 through 9.1.1.0 lets remote attackers with network reachability to the device's management interface disclose sensitive files, including configuration and password data. The flaw is a missing-authentication condition (CWE-306) with confidentiality-only impact, and the available intelligence does not confirm active exploitation; no public exploit identified at time of analysis. Risk is real within the product's deployment niche but bounded by footprint and exposure.
Authenticated users of Hitachi Energy TRO600 series devices can abuse the product's port-forwarding capability to reach services that are bound only to localhost, bypassing the network access restrictions that are supposed to keep those services unreachable from the network. Successful tunnelling gives the attacker access to sensitive local functionality and confidential information, and the flaw also carries an availability impact; all firmware versions from 9.0.0.0 through 9.2.1.6 are listed as affected. Exploitation requires a valid authenticated session (CVSS PR:L) and conditions outside the attacker's full control (AC:H, AT:P), no public exploit has been identified at time of analysis, and the vendor's priority guidance places this in the moderate, address-this-week band rather than an emergency.