Hitachi Coding Software Suite contains a Path Traversal flaw that allows an attacker to read, create, modify, or delete files on the system. The vulnerability is classed as CWE‑35 and can compromise confidentiality, integrity, and availability by enabling the attacker to manipulate files critical to the application or operating system. The description does not specify the exact attack vector; however, path traversal is typically introduced through network‑accessible interfaces or user‑supplied file paths, so it is inferred that the flaw could be triggered remotely.

The flaw affects Hitachi Industrial Equipment Systems’ Hitachi Coding Software Suite through version 3.3.0. No later versions are specifically mentioned as affected, implying that upgrades beyond 3.3.0 may contain a fix.

The CVSS score of 9.3 marks this as a critical vulnerability. EPSS is not available, and it is not listed in CISA KEV, indicating that while exploitation data is limited, the high score and clear ability to modify system files suggest a high risk if the software is exposed to untrusted input. The likely attack path involves submitting a crafted file path via a network service, after which the system resolves the path without proper validation and performs the file operation.