CVE-2024-57964

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
Hitachi	HVAC Energy Saving Program	<= *

References

https://www.hitachi.com/hirt/hitachi-sec/2025/001.html

Timeline

Published: Feb 18, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-579659.8In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted s CVE-2024-579665.0libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.CVE-2024-579674.2PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP m CVE-2024-579688.8Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible CVE-2024-579694.3app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.CVE-2024-579704.0libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive bec CVE-2024-579719.1DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occur CVE-2024-579726.5The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) t CVE-2024-579735.5In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_l CVE-2024-579744.7In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a CVE-2024-579755.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when run_delalloc_nocow() failed [BUG] CVE-2024-579765.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range() failed [BUG] When