CVE-2024-2377

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-30 · updated 2026-06-17
Weakness: CWE-346

Description

A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.

Affected products

Hitachi Energy SDM600: before 1.3.4.572 — fixed in 1.3.4.572

How to fix

Upgrade to a fixed version: Hitachi Energy SDM600 1.3.4.572. Check the vendor advisory for mitigations.

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000191&languageCode=en&Preview=true
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000191&languageCode=en&Preview=true

Get alerted when CVE-2024-2377 or the next vulnerability affects your stack