ICSA-22-242-04

icsaUScisa_csaf_ot

Hitachi Energy RTU500 series

view advisory published 2022-08-30

Successful exploitation of this vulnerability could cause an internal buffer overflow, which can reboot the product.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-28613UShigh7.5—
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationRTU500 series CMU Firmware

    Because the vulnerability affects only the RTU500 series with HCI Modbus TCP configured and enabled, a possible mitigation is to disable the HCI Modbus TCP function if not used. The HCI Modbus TCP is disabled by default.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan