CVE-2022-4608 - A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product

Back Back to CVE browser

HIGH

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product

Published Jul 26, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.71%

Description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected products

Vendor Hitachi Energy Product RTU500 series Default
unaffected
- Version
  RTU500 series CMU Firmware version 13.3.1
  Status
  affected
  Constraints
  -
- Version
  RTU500 series CMU Firmware version 13.3.2
  Status
  affected
  Constraints
  -
- Version
  RTU500 series CMU Firmware version 13.3.3
  Status
  unaffected
  Constraints
  -
- Version
  RTU500 series CMU Firmware version 13.4.1
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hitachi Energy

RTU500 series

unaffected

Version	Status	Constraints
RTU500 series CMU Firmware version 13.3.1	affected	-
RTU500 series CMU Firmware version 13.3.2	affected	-
RTU500 series CMU Firmware version 13.3.3	unaffected	-
RTU500 series CMU Firmware version 13.4.1	unaffected	-

Remediation

Vendor solution

Update to CMU Firmware versions 13.3.3 or 13.4.1.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51940		Advisory
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch		vendor-advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch