Skip to content
OpenAdvisories
High ICSA-21-336-05 1 CVE

Hitachi Energy Relion 670/650/SAM600-IO

Published Nov 4, 2021 · Updated May 27, 2025 · Revision 3

Summary

Hitachi Energy is aware of a report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion 670/650/SAM600-IO series versions listed below. Recommended action for each affected version is listed in the Recommended Immediate Actions Section.
An attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process where an older version of VxWorks is loaded prior to application firmware booting, could exploit the vulnerability in the older version of VxWorks and cause a denial-of-service on the product.

Vulnerabilities 1

Revision history

  1. #3

    Updated - Affected Product Versions & Recommended Immediate Actions

  2. #2

    Update on Section Recommended Immediate Actions

  3. #1

    Initial version.

References