CVE-2022-3353
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.
An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.
Already existing/established client-server connections are not affected.
List of affected CPEs:
* cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:*
* cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:*
* cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*
Affected (62)
Products: Hitachienergy: Sys600 Firmware, Rtu500 Firmware, Reb500 Firmware, Pwc600 Firmware, Modular Switchgear Monitoring Firmware, Itt600 Sa Explorer, Relion Sam600 Io Firmware, Relion 650 Firmware, Relion 670 Firmware, Gms600 Firmware, Fox615 Tego1 Firmware, Txpert Hub Coretec 4 Firmware, Txpert Hub Coretec 5 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.1 to 10.3.1 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Sys600 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 12.0.1.0 to 12.0.14.0 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Rtu500 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.0 to 8.3.3 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Reb500 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.0 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Pwc600 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.2.3 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Modular Switchgear Monitoring | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1.0 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2.1 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Relion Sam600 Io | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Relion 650 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Relion 670 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.3.0 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Gms600 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version r15b08 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Fox615 Tego1 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.0.0 to 3.0.0 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Txpert Hub Coretec 4 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.0.0 |
| Running on/with | Platform Versions |
|---|---|
Hitachienergy Txpert Hub Coretec 5 | All versions |
References (20)
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.