ICSA-21-336-04

icsaUScisa_csaf_ot

Hitachi Energy RTU500 series BCI

Advisory ansehen veröffentlicht 2021-12-02

Successful exploitation of this vulnerability could allow a remote attacker to reboot the device.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-35533UShigh7.5—
Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an att…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationRTU500 series CMU Firmware Version 12.0

    Disable BCI IEC 60870-5-104 function by configuration if it is not used. Note: By default, the BCI IEC 60870-5-104 is disabled.

  • MitigationRTU500 series CMU Firmware Version 12.2

    Disable BCI IEC 60870-5-104 function by configuration if it is not used. Note: By default, the BCI IEC 60870-5-104 is disabled.

  • MitigationRTU500 series CMU Firmware Version 12.4

    Disable BCI IEC 60870-5-104 function by configuration if it is not used. Note: By default, the BCI IEC 60870-5-104 is disabled.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan