CVE-2023-6711

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6711
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184&languageCode=en&Preview=true Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:13.5.1.0:*:*:*:*:*:*:*
cpe:2.3:h:hitachienergy:rtu500:-:*:*:*:*:*:*:*
History

28 Dec 2023, 19:03

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad en SCI IEC 60870-5-104 y HCI IEC 60870-5-104 que afecta a las versiones de productos de RTU500 series que se enumeran a continuación. Los mensajes especialmente manipulados enviados a los componentes mencionados no se validan correctamente y pueden provocar un desbordamiento de búfer y, como consecuencia final, un reinicio de una CMU RTU500.
CWE CWE-120
CVSS v2 : unknown
v3 : 5.9 		v2 : unknown
v3 : 7.5
References () https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184&languageCode=en&Preview=true - () https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184&languageCode=en&Preview=true - Vendor Advisory
CPE cpe:2.3:h:hitachienergy:rtu500:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hitachienergy:rtu500_firmware:13.5.1.0:*:*:*:*:*:*:*
First Time Hitachienergy rtu500 Firmware
Hitachienergy
Hitachienergy rtu500

19 Dec 2023, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-19 15:15

Updated : 2023-12-28 19:03

NVD link : CVE-2023-6711

Mitre link : CVE-2023-6711

CVE.ORG link : CVE-2023-6711

JSON object : View

Products Affected

hitachienergy

  • rtu500
  • rtu500_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-20

Improper Input Validation