Medium WID-SEC-2023-1435 4 CVEs

Hitachi Energy Relion: Mehrere Schwachstellen

Published Jun 12, 2023 · Updated Jun 12, 2023 · de-DE

Vendor: ABB Product: Hitachi Energy Relion REX640 FW < 1.0.8 Product: Hitachi Energy Relion REX640 FW < 1.1.4 Product: Hitachi Energy Relion REX640 FW < 1.2.1 Product: Relion

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy Relion ausnutzen, um einen Denial of Service Angriff durchzuführen und Informationen offenzulegen.

Product

Die Relion-Produktfamilie umfasst Produkte für Schutz, Steuerung, Messung und Überwachung von Energiesystemen für IEC- und ANSI-Anwendungen.

Vulnerabilities 4

Low 3.1

CVE-2023-2876

Session cookie exposure for client side script

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX…

ABB REX640 PCL1 REX640 PCL3 REX640 PCL2 ICS / OT

Jun 13, 2023
Unscored —

CVE-2011-1473 Public exploit EPSS 67%

OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL…

Jun 16, 2012
Unscored —

CVE-2011-3389 Public exploit EPSS 73%

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

asterisk curl bouncycastle nss Debian

Sep 6, 2011
Unscored —

CVE-2013-0169 Public exploit EPSS 36%

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…

openssl bouncycastle nss gnutls28 Debian Ubuntu

Feb 8, 2013

Revision history

2023-06-12 #1
Initiale Fassung

References

ABB Relion REX640 Cyber Security Improvements vom 2023-06-12
https://library.e.abb.com/public/1f777da94ee04c6a8108533b46c46971/ABB%20Relion%20REX640%20Cyber%20Security%20Improvements_Rev.A.pdf