A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature ‘Advanced security’ which must be ordered separately. If these preconditions are fulfilled, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a missing input data validation which eventually if exploited causes an internal buffer to overflow in the HCI IEC 60870-5-104 function.
References
| Link | Resource |
|---|---|
| https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Aug 2023, 19:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory | |
| CPE | cpe:2.3:h:hitachienergy:rtu500:-:*:*:*:*:*:*:* cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.3:*:*:*:*:*:*:* cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1:*:*:*:*:*:*:* cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.1:*:*:*:*:*:*:* cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.2:*:*:*:*:*:*:* |
|
| First Time |
Hitachienergy rtu500
Hitachienergy Hitachienergy rtu500 Firmware |
|
| CWE | CWE-20 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
26 Jul 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-26 06:15
Updated : 2023-12-10 15:14
NVD link : CVE-2022-2502
Mitre link : CVE-2022-2502
CVE.ORG link : CVE-2022-2502
JSON object : View
Products Affected
hitachienergy
- rtu500
- rtu500_firmware