Summary
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to reboot due to improper disk space management. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
Vulnerabilities 1
-
Medium 6.5
An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series devic…
Revision history
-
#8
Update C - Updated fixed version 2.2.1.9
-
#7
Updated fixed version 2.2.1.9
-
#6
Update B - Updated fixed version 2.2.4.6
-
#5
Updated fixed version 2.2.4.6
-
#4
Update A - Updated fixed version 2.2.6.4
-
#3
Updated fixed version 2.2.6.4
-
#2
Initial Republication of Hitachi Energy Advisory 8DBD000174
-
#1
Initial public release
References
-
Reboot Vulnerability in Hitachi Energy Relion 670/650 and SAM600-IO series products
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000174&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-25-184-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b