Log in Start free

Vulnerability · Published Feb 21, 2023 · Assigned by Hitachi Energy

CVE-2022-3353IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products

Medium 5.9

In plain English

A medium-severity security flaw in FOX61x TEGO1 from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)1.1%top 34.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.  Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*

Affected products (as reported)

VendorProductVersions
Hitachi Energy FOX61x TEGO1 tego1_r15b08tego1_r2a16_03tego1_r2a16tego1_r1e01tego1_r1d02tego1_r1c07tego1_r1b02
Hitachi Energy GMS600 GMS600 1.3
Hitachi Energy ITT600 SA Explorer ITT600 SA Explorer 1.1.0ITT600 SA Explorer 1.1.1ITT600 SA Explorer 1.1.2ITT600 SA Explorer 1.5.0ITT600 SA Explorer 1.5.1ITT600 SA Explorer 1.6.0ITT600 SA Explorer 1.6.0.1ITT600 SA Explorer 1.7.0
Hitachi Energy MicroSCADA X SYS600 SYS600 10SYS600 10.1SYS600 10.1.1SYS600 10.2SYS600 10.2.1SYS600 10.3SYS600 10.3.1SYS600 10.4
Hitachi Energy MSM MSM 2.2.3;0
Hitachi Energy PWC600 PWC600 1.0PWC600 1.1PWC600 1.2
Hitachi Energy REB500 REB500 7.0 – before 7.*REB500 8.0 – before 8.*
Hitachi Energy Relion® 670 Relion 670 1.2Relion 670 2.0Relion 670 version 2.1Relion 670 2.2.0Relion 670 2.2.1Relion 670 2.2.2Relion 670 2.2.3Relion 670 2.2.4
Hitachi Energy Relion® 650 Relion 650 1.1Relion 650 1.3Relion 650 2.1Relion 650 2.2.0Relion 650 2.2.1Relion 650 2.2.2Relion 650 2.2.3Relion 650 2.2.4
Hitachi Energy SAM600-IO Relion SAM600-IO 2.2.1Relion SAM600-IO 2.2.5
Hitachi Energy RTU500 RTU500 12.0.1 – through 12.0.14RTU500 12.2.1 – through 12.2.11RTU500 12.4.1 – through 12.4.11RTU500 12.6.1 – through 12.6.8
Hitachi Energy TXpert Hub CoreTec 4 CoreTec 4 version 2.0.*CoreTec 4 version 2.1.*CoreTec 4 version 2.2.*CoreTec 4 version 2.3.*CoreTec 4 version 2.4.*CoreTec 4 version 3.0.*
Hitachi Energy TXpert Hub CoreTec 5 CoreTec 5 version 3.0.*

Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References