Skip to content
OpenAdvisories
High · 7.5 CVE-2022-4608 EUVD-2022-51940GHSA-5568-g9wp-2cv7

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can onl…

Published Jul 26, 2023 · Updated Mar 5, 2025 · Assigned by Hitachi Energy

Vendor: Hitachi Energy Product: RTU500 series Category: ICS / OT

Description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected products

VendorProductAffectedFixed
Hitachi Energy RTU500 series RTU500 series CMU Firmware version 13.3.1, RTU500 series CMU Firmware version 13.3.2 RTU500 series CMU Firmware version 13.3.3

Advisories 2

References