CISA 2026-08-13

Hitachi Energy APM Edge Product

Machine-generated analysis · WAYSCloud LLM

Hitachi Energy's APM Edge product versions 6.10 and earlier are affected by Dirty Frag vulnerabilities. These vulnerabilities could allow a local, unprivileged user to escalate privileges to root.

Context

The advisory details two vulnerabilities, CVE-2026-43284 and CVE-2026-43500, impacting the APM Edge product. CVE-2026-43284, a Write-what-where Condition flaw in the Linux kernel's IPsec ESP subsystem, allows privilege escalation. CVE-2026-43500 is an Out-of-bounds Write vulnerability. The advisory recommends disabling the esp4 and esp6 modules as mitigation.

Operator considerations

Check: Inventory APM Edge product versions.

From Cybersecurity and Infrastructure Security Agency ↗

Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

The following versions of Hitachi Energy APM Edge Product are affected:

APM Edge vers:APM_Edge/

Read the full advisory on CISA →