Hitachi Energy FACTS Control Platform (FCP)

Hitachi Energy (republished by CISA) warns of multiple critical vulnerabilities (several CVEs) in the FACTS Control Platform (FCP) with the GWS component affecting many versions deployed since 2020; vulnerabilities include improper neutralization in data queries, path traversal, authentication bypass by capture-replay, missing authentication for critical functions, and open redirect. The advisory rates the issues as high severity (CVSS v3 9.9), notes potential impact to confidentiality, integrity and availability of energy control systems worldwide, lists affected product versions, and provides mitigation guidance and contact information.