Hitachi Energy Relion 670/650/SAM600-IO
Hitachi Energy is aware of a vulnerability report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion® 670/650/SAM600-IO series versions listed below. Remediation is available for some versions. Recommended actions for each affected version are listed in the Recommended Immediate Actions Section. An attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-35534US | high7.2 | — | ||
Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who success… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - Insufficient Security Control Vulnerability in Hitachi Energy Relion 670/650/SAM600-IO series Productsself
- ICS Advisory ICSA-25-065-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-065-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (17)
- MitigationHitachi Energy Relion 650 series version 1.0.0 all revisions
Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.
- MitigationHitachi Energy Relion 650 series version 1.1.0 all revisions
Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.
- MitigationHitachi Energy Relion 650 series version 1.2.0 all revisions
Refer to the Mitigation Factors/Workaround Section for the current mitigation strategy or upgrade to Relion 650 series version 1.3.
- MitigationHitachi Energy Relion 670 series version 2.2.0 all revisions
Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.
- FixedHitachi Energy Relion 650 series version 1.3.0.8
Update to Relion 650 series version 1.3.0.8
- FixedHitachi Energy Relion 650 series version 2.1.0 revisions up to 2.1.0.4
Update to Relion 670/650 series version 2.1.0.5
- FixedHitachi Energy Relion 650 series version 2.2.1 revisions up to 2.2.1.7
Update to Relion 670/650/SAM600-IO series version 2.2.1.8
- FixedHitachi Energy Relion 650 series version 2.2.4 revisions up to 2.2.4.2
Update to Relion 670/650 series version 2.2.4.3
- FixedHitachi Energy Relion 670 series version 2.0.0 revisions up to 2.0.0.13
Update to Relion 670/650 series version 2.0.0.14
- FixedHitachi Energy Relion 670 series version 2.1.0 revisions up to 2.1.0.4
Update to Relion 670/650 series version 2.1.0.5
- FixedHitachi Energy Relion 670 series version 2.2.1 revisions up to 2.2.1.7
Update to Relion 670/650/SAM600-IO series version 2.2.1.8
- FixedHitachi Energy Relion 670 series version 2.2.2 revisions up to 2.2.2.4
Update to Relion 670 series version 2.2.2.5
- FixedHitachi Energy Relion 670 series version 2.2.3 revisions up to 2.2.3.4
Update to Relion 670 series version 2.2.3.5
- FixedHitachi Energy Relion 670 series version 2.2.4 revisions up to 2.2.4.2
Update to Relion 670/650 series version 2.2.4.3
- FixedHitachi Energy Relion 670 series version 2.2.5 up to revision 2.2.5.1
Update to Relion 670/650/SAM600-IO series version 2.2.5.2
- FixedHitachi Energy Relion SAM600-IO series version 2.2.1 revisions up to 2.2.1.7
Update to Relion 670/650/SAM600-IO series version 2.2.1.8
- FixedHitachi Energy Relion SAM600-IO series version 2.2.5 up to revision 2.2.5.1
Update to Relion 670/650/SAM600-IO series version 2.2.5.2
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan