Summary
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to reboot due to improper disk space management.
Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
Vulnerabilities 1
-
High 7.5
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in…
Revision history
-
#2
Updated fixed version 2.2.6.4
-
#1
Initial version.
References
-
Cybersecurity Advisory - DoS Vulnerability in Hitachi Energy
Relion 670/650 and SAM600-IO series
products
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000216&languageCode=en&Preview=true
-
ICS Advisory ICSA-25-182-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-06
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B