Summary
Hitachi Energy is aware of a reported vulnerability in the IEC 61850 communication stack, that is used in the Relion® 670, 650 and SAM600-IO products versions listed in this document. A version is available that remediates the identified vulnerability.
An attacker who successfully exploited this vulnerability could force the IEC 61850 MMS-server communication stack to stop accepting new MMS-client connections. A manual reboot is required to reenable IEC 61850 MMS-server communication for accepting new MMS-client connections.
During the reboot phase, the primary functionality of the device is not available.
Vulnerabilities 1
-
Medium 5.9
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to st…
Revision history
-
#4
CISA Republication update based on Hitachi Energy PSIRT 8DBD000127 advisory
-
#3
Update to Recommended Actions table with fixed version 2.2.1.9
-
#2
Update to Recommended Actions table with fixed versions
-
#1
Initial version.
References
-
Cybersecurity Advisory - IEC 61850 MMS-Server Vulnerability in Hitachi Energy’s Relion®670, 650 series and SAM600-IO Products
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000127&languageCode=en&Preview=true
-
ICS Advisory ICSA-23-089-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-089-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b