Vulnerabilidades de Hitachi Industrial Equipment Systems
CVEs publicadas que afetam produtos de Hitachi Industrial Equipment Systems: 6 registro(s), com severidade, exploração e correções.
CVE-2026-82829
Crítica · 9.8
CWE-912 01/10/2026
Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
CVE-2026-82828
Alta · 8.8
CWE-863 01/10/2026
Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges
Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
CVE-2026-82827
Crítica · 9.8
CWE-321 01/10/2026
A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
CVE-2026-82826
Alta · 7.5
CWE-319 01/10/2026
Authentication information or sensitive data may be intercepted in transit
Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
CVE-2026-82825
Crítica · 9.8
CWE-306 01/10/2026
Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
CVE-2026-82824
Crítica · 9.8
CWE-35 01/10/2026
Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files.
This issue affects Hitachi Coding Software Suite: through 3.3.0.