Hitachi Coding Software Suite is vulnerable to Cleartext Transmission of Sensitive Information, allowing an attacker to intercept authentication credentials and other confidential data that travel over unencrypted channels. The flaw permits passive eavesdropping, which can lead to identity theft, unauthorized access, and data leakage if attackers capture session tokens or passwords.

The vulnerability affects Hitachi Industrial Equipment Systems’ Hitachi Coding Software Suite through version 3.3.0. Users running any of these releases are at risk.

The CVSS score of 8.7 indicates a high potential for damage, while the EPSS score is not available, suggesting current exploitation data is limited. The vulnerability is not listed in CISA’s KEV catalog, implying it has not yet been widely exploited in the wild. Likely attack vectors involve network traffic that is not protected by TLS or other encryption mechanisms, such as HTTP or unsecured proprietary protocols, making the threat relevant to any environment that transmits credentials in plaintext.