Description
A vulnerability exists in the input validation of the GOOSE
messages where out of range values received and processed
by the IED caused a reboot of the device. In order for an
attacker to exploit the vulnerability, goose receiving blocks need
to be configured.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | Relion670 | Relion 670 series version 2.2.0 all revisions, Relion 670/650/SAM600-IO series version 2.2.1 all revisions, elion 670 series version 2.2.2 all revisions, Relion 670 series version 2.2.3 all revisions, Relion 670/650 series version 2.2.4 all revisions, Relion 670/650/SAM600-IO series version 2.2.5 a… | — |
Advisories 2
- ICSA-25-133-02 Hitachi Energy Relion 670/650/SAM600-IO Series (Update C) CISA ICS & IT advisories · Feb 26, 2026
- WID-SEC-2024-2105 Hitachi Energy Relion: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Dec 1, 2024