Към съдържанието
Търсене

CVE-2022-3353: Hitachi Energy FOX61x TEGO1, отказ на услуга

5.9

CVSS 3.1

1,1%

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, при специфични условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.  Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*

Засегнати продукти

  • Hitachi Energy FOX61x TEGO1: tego1_r16a11; tego1_r15b08; tego1_r2a16_03; tego1_r2a16; tego1_r1e01; tego1_r1d02; tego1_r1c07; tego1_r1b02
  • Hitachi Energy GMS600: GMS600 1.3
  • Hitachi Energy ITT600 SA Explorer: ITT600 SA Explorer 1.1.0; ITT600 SA Explorer 1.1.1; ITT600 SA Explorer 1.1.2; ITT600 SA Explorer 1.5.0; ITT600 SA Explorer 1.5.1; ITT600 SA Explorer 1.6.0; ITT600 SA Explorer 1.6.0.1; ITT600 SA Explorer 1.7.0; ITT600 SA Explorer 1.7.2; ITT600 SA Explorer 1.8.0; ITT600 SA Explorer 2.0.1; ITT600 SA Explorer 2.0.2; ITT600 SA Explorer 2.0.3; ITT600 SA Explorer 2.0.4.1; ITT600 SA Explorer 2.0.5.0; ITT600 SA Explorer 2.0.5.4; ITT600 SA Explorer 2.1.0.4; ITT600 SA Explorer 2.1.0.5; ITT600 SA Explorer 2.1.1.2
  • Hitachi Energy MicroSCADA X SYS600: SYS600 10; SYS600 10.1; SYS600 10.1.1; SYS600 10.2; SYS600 10.2.1; SYS600 10.3; SYS600 10.3.1; SYS600 10.4; SYS600 10.4.1
  • Hitachi Energy MSM: MSM 2.2.3;0
  • Hitachi Energy PWC600: PWC600 1.0; PWC600 1.1; PWC600 1.2
  • Hitachi Energy REB500: REB500 7.0 преди 7.*; REB500 8.0 преди 8.*; REB500 8.3.3.0
  • Hitachi Energy Relion® 670: Relion 670 1.2; Relion 670 2.0; Relion 670 version 2.1; Relion 670 2.2.0; Relion 670 2.2.1; Relion 670 2.2.2; Relion 670 2.2.3; Relion 670 2.2.4; Relion 670 2.2.5
  • Hitachi Energy Relion® 650: Relion 650 1.1; Relion 650 1.3; Relion 650 2.1; Relion 650 2.2.0; Relion 650 2.2.1; Relion 650 2.2.2; Relion 650 2.2.3; Relion 650 2.2.4; Relion 650 2.2.5
  • Hitachi Energy SAM600-IO: Relion SAM600-IO 2.2.1; Relion SAM600-IO 2.2.5
  • Hitachi Energy RTU500: RTU500 12.0.1 до 12.0.14; RTU500 12.0.15; RTU500 12.2.1 до 12.2.11; RTU500 12.2.12; RTU500 12.4.1 до 12.4.11; RTU500 12.4.12; RTU500 12.6.1 до 12.6.8; RTU500 12.6.9; RTU500 12.7.1 до 12.7.4; RTU500 12.7.5; RTU500 13.2.1 до 13.2.5; RTU500 13.2.6; RTU500 13.3.1 до 13.3.3; RTU500 13.3.4; RTU500 13.4.1; RTU500 13.4.2
  • Hitachi Energy TXpert Hub CoreTec 4: CoreTec 4 version 2.0.*; CoreTec 4 version 2.1.*; CoreTec 4 version 2.2.*; CoreTec 4 version 2.3.*; CoreTec 4 version 2.4.*; CoreTec 4 version 3.0.*
  • Hitachi Energy TXpert Hub CoreTec 5: CoreTec 5 version 3.0.*

Вид слабост

История

  • 21 февруари 2023 Публикувано

Други уязвимости в Hitachi Energy FOX61x TEGO1

Първоизточници

CVE-2022-3353: Hitachi Energy FOX61x TEGO1, отказ на услуга | freedomonline.bg