ICSA-23-220-02

icsaUScisa_csaf_ot

Hitachi Energy RTU500 series

Advisory ansehen veröffentlicht 2023-08-08

Successful exploitation of these vulnerabilities could cause a buffer overflow and reboot of the product.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-4608UShigh7.5—
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is…
CVE-2022-2502UShigh7.5—
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-10…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationRTU500 Series CMU

    Do not use process control systems for internet surfing, instant messaging, or receiving emails.

  • MitigationRTU500 Series CMU

    Do not use process control systems for internet surfing, instant messaging, or receiving emails.

  • BehobenRTU500 Series CMU

    Hitachi Energy recommends users update to CMU Firmware versions 13.3.3 or 13.4.1.

  • BehobenRTU500 Series CMU

    Hitachi Energy recommends users update to CMU Firmware versions 13.3.3 or 13.4.1.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan