Hitachi Energy’s GMS600 versions 1.3.0 and 1.3.1 are affected by CVE-2022-4304, an OpenSSL RSA timing-side-channel vulnerability republished by CISA on May 21, 2026, with the vendor’s remediation pointing operators to GMS600 version 1.3.2. The bug is not a new zero-day, and it is not the kind of...
CISA republished Siemens ProductCERT advisory SSA-786884 on May 14, 2026, warning that many Siemens SIPROTEC 5 protection devices generate insufficiently random session identifiers, creating a network-exploitable session hijacking risk tracked as CVE-2024-54017 and affecting deployments...