CVE-2025-2500
High
Description
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.
SeverityHigh
CVSS7.4
Exploit probability33. percentile0.4%
ProductAsset Suite
PublishedMay 30, 2025
First seenMay 30, 2025
Weakness typeCWE-256CWE-256
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi Energy Asset Suite | 9.6.4.4, 9.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.