ICSA-21-336-08

icsaUScisa_csaf_ot

Hitachi Energy RTU500 series

view advisory published 2021-12-02

Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2021-3517UShigh8.6—
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application li…
CVE-2020-1968USlow3.7—
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellma…
CVE-2020-24977USmedium6.5—
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • FixedRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

  • FixedRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

  • FixedRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan