Hitachi Energy FACTS Control Platform (FCP)

As cited

Copy frozen at 2026-09-17 23:03 UTC (site build).

vulnerabilities

Hitachi Energy FACTS Control Platform (FCP)

Hitachi Energy disclosed five vulnerabilities affecting FACTS Control Platform versions 3.4.0 through 4.1.1 when the GWS component is present. The flaws range from critical SQL injection and path traversal issues requiring authentication to an unauthenticated missing authentication flaw and a medium-severity open redirect, with CVSS scores spanning 4.3 to 9.9. The vulnerabilities impact worldwide deployments of power control equipment including STATCOMs and capacitors used in energy infrastructure.

Why it matters: Energy utilities and critical infrastructure operators deploying affected FACTS Control Platform versions must assess exposure and apply the Hitachi Energy advisory 8DBD000229 mitigations immediately, as critical-severity authenticated attacks could compromise confidentiality, integrity, and availability of grid control systems.

Source published

2026-09-17 12:00 UTC

First seen by Cybersecurity Tracker

2026-09-17 18:22 UTC