Hitachi Energy IEC 61850 MMS-Server (Update B)
Hitachi Energy is aware of a reported vulnerability in the IEC 61850 communication stack, that is used in the Relion® 670, 650 and SAM600-IO products versions listed in this document. A version is available that remediates the identified vulnerability. An attacker who successfully exploited this vulnerability could force the IEC 61850 MMS-server communication stack to stop accepting new MMS-client connections. A manual reboot is required to reenable IEC 61850 MMS-server communication for accepting new MMS-client connections. During the reboot phase, the primary functionality of the device is not available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3353US | high7.5 | — | ||
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.
An attacker could exploit the vulnerability by using a specially cra… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - IEC 61850 MMS-Server Vulnerability in Hitachi Energy’s Relion®670, 650 series and SAM600-IO Productsself
- ICS Advisory ICSA-23-089-01 JSONself
- ICS Advisory ICSA-23-089-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationRelion 650
Follow general mitigation factors
- MitigationRelion 670
Follow general mitigation factors
- MitigationSAM600-IO
Update to version 2.2.1.9 or latest
- FixedRelion 650
Update to version 2.1.0.6 or latest
- FixedRelion 670
Update to version 1.2.3.23 or latest
- FixedSAM600-IO
Update to version 2.2.5.6 or latest
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan