Summary
Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document. Authenticated users with certain roles can exploit the vulnerabilities to access and modify the directory contents they are not authorized to do so. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
Vulnerabilities 2
-
High 7.6
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of…
-
High 7.4
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of dire…
Revision history
-
#2
Initial CISA Republication of Hitachi Energy PSIRT 8DBD000217 advisory
-
#1
Initial public release
References
-
Excessive Privilege Vulnerability in Hitachi Energy Relion REB500 Product
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-26-062-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b