Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-6711

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500 series CMU Firmware

Default version status: unaffected

  • 12.0.1 to ≤ 12.0.14affected
  • 12.2.1 to ≤ 12.2.11affected
  • 12.4.1 to ≤ 12.4.11affected
  • 12.6.1 to ≤ 12.6.9affected
  • 12.7.1 to ≤ 12.7.6affected
  • 13.2.1 to ≤ 13.2.6affected
  • 13.4.1 to ≤ 13.4.3affected
  • 13.5.1affected

References