Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A)
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to reboot due to improper disk space management. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-2403US | — | — | ||
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - DoS Vulnerability in Hitachi Energy Relion 670/650 and SAM600-IO series productsself
- ICS Advisory ICSA-25-182-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-182-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationRelion 650
Apply general mitigation factors
- MitigationRelion 670
Apply general mitigation factors
- MitigationSAM600-IO
Apply general mitigation factors
- FixedRelion 650
Fixed in version 2.2.5.7. Update to version 2.2.5.8 or latest
- FixedRelion 670
Fixed in version 2.2.5.7. Update to version 2.2.5.8 or latest
- FixedSAM600-IO
Fixed in version 2.2.5.7. Update to version 2.2.5.8 or latest
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan