PatchTheCVEhyper historian vulnerabilities and fixes
Recent CVEs affecting hyper historian, with upgrade or downgrade steps. 7 tracked.
Also searched as: hyperhistorian.
hyper historian has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-01-21. Highest priority: CVE-2020-12011 (score 64/100).
- CVE-2022-23130 MEDIUM 5.9 UPGRADE UPGRADE Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric
- CVE-2022-23128 CRITICAL 9.8 UPGRADE UPGRADE Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201
- CVE-2020-12015 HIGH 7.5 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected systems could cause a denial-of-service conditio
- CVE-2020-12013 CRITICAL 9.1 DOWNGRADE UPGRADE A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL command
- CVE-2020-12011 CRITICAL 9.8 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected systems could cause a denial-of-service conditio
- CVE-2020-12009 HIGH 7.5 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected device could cause a denial-of-service condition
- CVE-2020-12007 CRITICAL 9.8 UPGRADE DOWNGRADE A specially crafted communication packet sent to the affected devices could allow remote code execution and a
FAQ
How do I fix hyper historian vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hyper historian being exploited right now?
None of the tracked hyper historian CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hyper historian CVE should I patch first?
CVE-2020-12011 currently ranks highest (64/100): A specially crafted communication packet sent to the affected systems could cause a denial-of-service conditio.