CISA republishes Hitachi Energy advisory on Linux kernel flaws in APM Edge

By Atlas Watchline Staff · Regulatory · August 13, 2026

CISA republished a Hitachi Energy advisory on Aug. 13 about two Linux kernel vulnerabilities in APM Edge versions 6.10 and earlier that could let a local unprivileged user gain root access.

CISA republished a Hitachi Energy advisory on Aug. 13 about two Linux kernel vulnerabilities in APM Edge versions 6.10 and earlier that could let a local unprivileged user gain root access.

What happened

The Cybersecurity and Infrastructure Security Agency republished a Hitachi Energy PSIRT advisory on Aug. 13 covering two vulnerabilities in the Hitachi Energy APM Edge product. The advisory says APM Edge versions 6.10 and earlier are affected.

The issues are identified as CVE-2026-43284 and CVE-2026-43500. CISA says both can allow a local unprivileged user to escalate privileges to root. The advisory describes CVE-2026-43284 as a CWE-123 write-what-where condition in the Linux kernel IPsec ESP subsystem, and CVE-2026-43500 as a CWE-787 out-of-bounds write in the Linux kernel RxRPC protocol implementation.

Why it matters

CISA says successful exploitation could affect confidentiality, integrity and availability of the product. The advisory also says an attacker could cause the kernel to write or decrypt data into memory pages it does not own, including cached copies of privileged operating system binaries. If a corrupted binary is executed, CISA says attacker code could run with root privileges.

The advisory places the issue in the energy sector and says APM Edge is deployed worldwide. Hitachi Energy’s headquarters are in Switzerland, according to the notice.

Context and background

CISA says the Hitachi Energy Internal Team reported the vulnerabilities to the agency. The original Hitachi Energy advisory was released on July 28, and CISA’s republication came on Aug. 13.

CISA gives CVE-2026-43284 a CVSS v3.1 base score of 8.8 and rates it HIGH. It gives CVE-2026-43500 a CVSS v3.1 base score of 7.8 and also rates it HIGH.

For CVE-2026-43284, the affected kernel modules are esp4 and esp6. For CVE-2026-43500, the affected module is rxrpc. CISA says those modules can be loaded by any local user and exploited in APM Edge.

What officials said

CISA’s advisory repeats Hitachi Energy’s mitigation steps: disable the esp4 and esp6 modules for CVE-2026-43284, and disable the rxrpc module for CVE-2026-43500.

CISA also repeats general defensive guidance for control systems. It says operators should minimize network exposure for control system devices and systems, keep them off the internet, place control system networks and remote devices behind firewalls, isolate them from business networks, and use VPNs for remote access when needed.

What happens next

The advisory does not list a patch in the text provided. It points operators to the module-disabling mitigations and CISA’s broader control-system security guidance.

Sources

• CISA ICS advisory ICSA-26-225-04

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.