Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-4518

A vulnerability exists in the input validation of the GOOSE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy Relion670

Default version status: affected

  • Relion 670 series version 2.2.0 all revisionsaffected
  • Relion 670/650/SAM600-IO series version 2.2.1 all revisionsaffected
  • elion 670 series version 2.2.2 all revisionsaffected
  • Relion 670 series version 2.2.3 all revisionsaffected
  • Relion 670/650 series version 2.2.4 all revisionsaffected
  • Relion 670/650/SAM600-IO series version 2.2.5 all revisionsaffected

References