Security Vulnerabilities in Hitachi Energy FACTS Control Platform

Critical Infrastructure Risks

Hitachi Energy has reported that several FACTS Control systems (specifically those integrated with GWS components deployed since 2020) are affected by vulnerabilities that threaten the core pillars of cybersecurity: confidentiality, integrity, and availability. Systems such as SVC Light (STATCOM) and Fixed Series Capacitors are currently under evaluation. Exploitation of these weaknesses could allow threat actors to interfere with energy delivery processes, potentially causing significant operational downtime or data leakage within the control platform.

Recommendations for Energy Operators

• Inventory Verification: Organizations should audit their current deployments to determine if GWS components are present, as systems without them are currently unaffected.
• Vendor Consultation: Work closely with Hitachi Energy support representatives to obtain specific remediation guidance and applicable firmware patches.
• Incident Response: Ensure that incident response plans are updated to reflect the critical nature of these control platforms, including manual override procedures should the automation layer be compromised.

---

แหล่งที่มา: CISA Cybersecurity Advisories เผยแพร่ครั้งแรก: Thu, 17 Sep 26 12:00:00 +0000 บทความต้นฉบับ: อ่านต้นฉบับ