Vulnerability · Published Jul 26, 2023 · Assigned by Hitachi Energy

CVE-2022-4608

High 7.5

In plain English

A high-severity out-of-bounds write in RTU500 series from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.7%top 46.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected products (as reported)

Vendor	Product	Versions
Hitachi Energy	RTU500 series	RTU500 series CMU Firmware version 13.3.1RTU500 series CMU Firmware version 13.3.2

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In plain English

Official description

Affected products (as reported)

References