CVE-2022-37680

High

Description

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system (Camera, Decoder and Encoder) and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.

SeverityHigh

CVSS7.5

Exploit probability—

ProductHitachi Hc-ip9100hd Firmware

PublishedAug 29, 2022

First seenAug 29, 2022

How to fix

Vendor advisories

hitachi-kokusai.co.jp/global/en/products/info/vulnerable/hitachi-sec-2022-001/index.html

Affected products

Product	Affected versions	Fixed in
hitachi hc-ip9100hd_firmware	v ≤ 1.07	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.