← CVE Intelligence

CVE-2022-4608

Hitachi Energy / RTU500 series PUBLISHED

Description (CNA)

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected (CNA)

Vendor / productVersions
Hitachi Energy / RTU500 seriesaffected RTU500 series CMU Firmware version 13.3.1; affected RTU500 series CMU Firmware version 13.3.2; unaffected RTU500 series CMU Firmware version 13.3.3; unaffected RTU500 series CMU Firmware version 13.4.1

CWE

CWE-787

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.