Vulnerability · Published Dec 1, 2023 · Assigned by Hitachi Energy
CVE-2023-4518
Medium 6.5
In plain English
A medium-severity security flaw in Relion670 from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.7%top 46.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | Relion670 | Relion 670 series version 2.2.0 all revisionsRelion 670/650/SAM600-IO series version 2.2.1 all revisionselion 670 series version 2.2.2 all revisionsRelion 670 series version 2.2.3 all revisionsRelion 670/650 series version 2.2.4 all revisionsRelion 670/650/SAM600-IO series version 2.2.5 all revisions |
Weakness: CWE-1284 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H