Known vulnerabilities in Modular Switchgear Monitoring (MSM)

Vendor: Hitachi Energy
Software: Modular Switchgear Monitoring (MSM)
Software CPE: cpe:2.3:h:hitachi_energy:modular_switchgear_monitoring_msm:*:*:*:*:*:*:*:*
Website: https://www143.abb.com/SoftwareLibrary
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Modular Switchgear Monitoring (MSM) Modular Switchgear Monitoring (MSM) is affected by 15 known vulnerabilities: 5 high, 4 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67919 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-40336		 CWE-113 Medium
No
No
 - 05.10.2022 SB2022100514
#VU67918 - Cross-Site Request Forgery (CSRF)
CVE-2021-40335		 CWE-352 Low
No
No
 - 05.10.2022 SB2022100514
#VU66916 - Heap-based Buffer Overflow
CVE-2013-2174		 CWE-122 High
No
No
 - 01.09.2022 SB2013073112
SB2022090138
SB2013062403
#VU66915 - Out-of-bounds read
CVE-2014-3707		 CWE-125 Medium
No
No
 - 01.09.2022 SB2014111502
SB2022090138
SB2014110507
and 3 more
#VU66914 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4273		 CWE-79 Low
Available
No
 - 01.09.2022 SB2011110309
SB2022090138
#VU15673 - Heap-based Buffer Overflow
CVE-2018-16842		 CWE-122 Low
No
No
 - 01.11.2018 SB2018110105
SB2018110106
SB2018110302
and 20 more
#VU33018 - Double Free
CVE-2016-8619		 CWE-415 High
No
No
 - 01.08.2018 SB2018080126
SB2016111006
SB2016110309
and 14 more
#VU33012 - Out-of-bounds write
CVE-2016-8617		 CWE-787 Low
No
No
 - 01.08.2018 SB2018080123
SB2016111006
SB2016110309
and 14 more
#VU33020 - Out-of-bounds read
CVE-2016-8621		 CWE-125 Medium
No
No
 - 01.08.2018 SB2018080128
SB2016111006
SB2016110309
and 14 more
#VU33017 - Double Free
CVE-2016-8618		 CWE-415 High
No
No
 - 31.07.2018 SB2018073119
SB2016111006
SB2016110309
and 11 more
#VU33022 - Memory corruption
CVE-2016-9586		 CWE-119 High
No
No
 - 23.04.2018 SB2018042319
SB2016123022
SB2017010307
and 10 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103		 CWE-79 Low
No
No
 - 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more
#VU655 - Integer underflow
CVE-2016-7167		 CWE-191 High
No
No
 - 23.09.2016 SB2016092001
SB2016092002
SB2016092003
and 11 more
#VU8436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6584		 CWE-79 Low
No
No
 - 11.09.2015 SB2015091101
SB2022090138
#VU32552 - Improper Authentication
CVE-2014-0138		 CWE-287 Medium
No
No
 - 15.04.2014 SB2014041501
SB2014041723
SB2014041108
and 2 more