ICSA-25-065-02

icsaUScisa_csaf_ot

Hitachi Energy Relion 670/650/SAM600-IO

Advisory ansehen veröffentlicht 2021-11-04

Hitachi Energy is aware of a vulnerability report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion® 670/650/SAM600-IO series versions listed below. Remediation is available for some versions. Recommended actions for each affected version are listed in the Recommended Immediate Actions Section. An attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-35534UShigh7.2—
Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who success…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (17)

  • MitigationHitachi Energy Relion 650 series version 1.0.0 all revisions

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

  • MitigationHitachi Energy Relion 650 series version 1.1.0 all revisions

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

  • MitigationHitachi Energy Relion 650 series version 1.2.0 all revisions

    Refer to the Mitigation Factors/Workaround Section for the current mitigation strategy or upgrade to Relion 650 series version 1.3.

  • MitigationHitachi Energy Relion 670 series version 2.2.0 all revisions

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

  • BehobenHitachi Energy Relion 650 series version 1.3.0.8

    Update to Relion 650 series version 1.3.0.8

  • BehobenHitachi Energy Relion 650 series version 2.1.0 revisions up to 2.1.0.4

    Update to Relion 670/650 series version 2.1.0.5

  • BehobenHitachi Energy Relion 650 series version 2.2.1 revisions up to 2.2.1.7

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion 650 series version 2.2.4 revisions up to 2.2.4.2

    Update to Relion 670/650 series version 2.2.4.3

  • BehobenHitachi Energy Relion 670 series version 2.0.0 revisions up to 2.0.0.13

    Update to Relion 670/650 series version 2.0.0.14

  • BehobenHitachi Energy Relion 670 series version 2.1.0 revisions up to 2.1.0.4

    Update to Relion 670/650 series version 2.1.0.5

  • BehobenHitachi Energy Relion 670 series version 2.2.1 revisions up to 2.2.1.7

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion 670 series version 2.2.2 revisions up to 2.2.2.4

    Update to Relion 670 series version 2.2.2.5

  • BehobenHitachi Energy Relion 670 series version 2.2.3 revisions up to 2.2.3.4

    Update to Relion 670 series version 2.2.3.5

  • BehobenHitachi Energy Relion 670 series version 2.2.4 revisions up to 2.2.4.2

    Update to Relion 670/650 series version 2.2.4.3

  • BehobenHitachi Energy Relion 670 series version 2.2.5 up to revision 2.2.5.1

    Update to Relion 670/650/SAM600-IO series version 2.2.5.2

  • BehobenHitachi Energy Relion SAM600-IO series version 2.2.1 revisions up to 2.2.1.7

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion SAM600-IO series version 2.2.5 up to revision 2.2.5.1

    Update to Relion 670/650/SAM600-IO series version 2.2.5.2

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan