Skip to content
OpenAdvisories
Medium ICSA-23-089-01 1 CVE

Hitachi Energy IEC 61850 MMS-Server (Update B)

Published Feb 14, 2023 · Updated Feb 3, 2026 · Revision 4

Summary

Hitachi Energy is aware of a reported vulnerability in the IEC 61850 communication stack, that is used in the Relion® 670, 650 and SAM600-IO products versions listed in this document. A version is available that remediates the identified vulnerability.
An attacker who successfully exploited this vulnerability could force the IEC 61850 MMS-server communication stack to stop accepting new MMS-client connections. A manual reboot is required to reenable IEC 61850 MMS-server communication for accepting new MMS-client connections.
During the reboot phase, the primary functionality of the device is not available.

Vulnerabilities 1

  • Medium 5.9

    IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products

    A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to st…

Revision history

  1. #4

    CISA Republication update based on Hitachi Energy PSIRT 8DBD000127 advisory

  2. #3

    Update to Recommended Actions table with fixed version 2.2.1.9

  3. #2

    Update to Recommended Actions table with fixed versions

  4. #1

    Initial version.

References