Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-11499

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500

Default version status: unaffected

  • 13.4.1 to ≤ 13.4.4affected
  • 13.5.1 to ≤ 13.5.3affected
  • 13.5.3affected
  • 13.6.1affected
  • 13.7.1affected
  • 13.5.4unaffected
  • 13.6.2unaffected
  • 13.7.6unaffected

References