What is CVE-2023-5516?

CVE-2023-5516 is a medium-severity vulnerability in Hitachi Energy Esoms, classified under Information Disclosure. CVSS score: 5.3/10. Published 2023-11-01.

How severe is CVE-2023-5516?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Hitachi Energy Esoms

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical details like version Info, endpoints, backend server, Internal IP. etc., which can potentially expose additional attack surface containing other interesting vulnerabilities.

Vulnerability class: Information Disclosure

EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hitachi Energy Esoms — versions 6.0
Hitachienergy Esoms

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cybersecurity@hitachienergy.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-5516?: CVE-2023-5516 is a medium-severity vulnerability in Hitachi Energy Esoms, classified under Information Disclosure. CVSS score: 5.3/10. Published 2023-11-01.
How severe is CVE-2023-5516?: Medium severity. CVSS v3 base score is 5.3 out of 10.