logo

Hitachi Energy SOI

ID: 7c23dc20-98ea-5104-a85a-cf05f1fb0272

STIX ID: report--7c23dc20-98ea-5104-a85a-cf05f1fb0272

Feed Name: CISA Advisories

Threat Score
75/100

Date Published: 2026-10-06

Date Updated: 2026-10-06

Author: CISA

...
...

Hitachi Energy reports a remote code execution vulnerability (CVE-2026-34197) in Apache ActiveMQ used by SOI versions 2.0.0–2.2.0; the flaw allows authenticated attackers to trigger the broker to load a remote Spring XML context via the Jolokia JMX-HTTP bridge leading to arbitrary code execution. The advisory lists CVSS v3 8.8, affected products, recommended mitigation and a vendor patch (SOI EP2 that upgrades ActiveMQ and OpenJDK), and provides general ICS hardening guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.