CISA 2026-05-05

Hitachi Energy PCM600

CVE-2018-1002208

Machine-generated analysis · WAYSCloud LLM

The vulnerability is a known path traversal flaw in SharpZipLib, designated CVE-2018-1002208. Multiple PCM600 versions, including legacy 2.11 and newer 3.x releases, are affected.

Context

Hitachi Energy PCM600 is a software product used in the energy sector, deployed worldwide. The advisory states that an attacker exploiting this vulnerability can impact the integrity of the product. The vulnerability is inherited from a third-party library and affects versions distributed under both ABB and Hitachi Energy.

Operator considerations

Check: Inventory all instances of Hitachi Energy PCM600 versions 2.11 and earlier, and 3.0 through 3.1 SP3.
Patch: Refer to ABB's advisory [2NGA002813] for legacy versions and contact Hitachi Energy for 3.x mitigation guidance.

From Cybersecurity and Infrastructure Security Agency ↗

Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions listed in this document. An attacker successfully exploiting this vulnerability can impact integrity of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

The following versions of Hitachi Energy PCM600 are affected:

PCM600 Legacy vers:PCM600_Legacy/

Read the full advisory on CISA →