Skip to content
OpenAdvisories
Medium ICSA-23-068-05 1 CVE

Hitachi Energy Relion 670, 650 and SAM600-IO Series

Published Feb 28, 2023 · Updated Feb 3, 2026 · Revision 4

Vendor: Hitachi Energy Product: Relion 650 Product: Relion® 670 Product: SAM600-IO

Summary

Hitachi Energy is aware of a report from Nozomi Networks Labs, concerning the vulnerability CVE-2022-3864 affecting the Relion 670/650/SAM600-IO series versions listed below. Recommended actions for each affected version are listed in the “Recommended Immediate Actions” section of this document. An attacker who manages to get access with security privileges to the device, can start the update mechanism, supplying a malicious update package to the IED. When the system attempts to verify the tampered update package, a crash occurs resulting in the reboot of the device, after reboot the device is back in normal operation.

Vulnerabilities 1

Revision history

  1. #4

    Updated mitigation section with fixed version

  2. #3

    Updated Recommended Immediate Actions table with fixed version 2.2.1.9

  3. #2

    Updated - Affected Product Versions & Recommended Immediate Actions

  4. #1

    Initial version.

References