← Back

CVE-2022-28613

nvd nist
Published: May 2, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.

Affected (6)

Abb
1 product
Rtu500 Firmware
Hitachienergy
1 product
Rtu500 Firmware
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rtu500 Firmware
From 12.2.1.0 to 12.2.12.0
Hitachienergy
Rtu500 Firmware
From 12.0.1.0 to 12.0.14.0
Rtu500 Firmware
From 12.4.1.0 to 12.4.12.0
Rtu500 Firmware
From 12.6.1.0 to 12.6.8.0
Rtu500 Firmware
From 12.7.1.0 to 12.7.4.0
Rtu500 Firmware
From 13.2.1.0 to 13.2.5.0
Running on/withPlatform Versions
Hitachienergy
Rtu500
All versions

Related CWEs

CWE-1284
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (2)

Source: cybersecurity@hitachienergy.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.