Skip to content
OpenAdvisories
High ICSA-21-336-08 3 CVEs

Hitachi Energy RTU500 series

Published Dec 2, 2021 · Updated Dec 2, 2021

Vendor: Hitachi Energy Product: RTU500 series CMU firmware

Summary

Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.

Vulnerabilities 3

  • High 8.6
    CVE-2021-3517 EPSS 17%

    Nokogiri contains libxml Out-of-bounds Write vulnerability

    There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds …

    qt5-qtwebengine libxml2 libxml2 nokogiri Debian Ubuntu Alpine RubyGems
  • Low 3.7
    CVE-2020-1968

    Raccoon attack

    The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker bein…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2020-24977

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entit…

    libxml2 libxml2 libxml2 Debian Ubuntu Alpine

Revision history

  1. #1

    ICSA-21-336-08 Hitachi Energy RTU500 series

References