Hitachi Energy Relion 670, 650 and SAM600-IO Series
Hitachi Energy is aware of a report from Nozomi Networks Labs, concerning the vulnerability CVE-2022-3864 affecting the Relion 670/650/SAM600-IO series versions listed below. Recommended actions for each affected version are listed in the “Recommended Immediate Actions” section of this document. An attacker who manages to get access with security privileges to the device, can start the update mechanism, supplying a malicious update package to the IED. When the system attempts to verify the tampered update package, a crash occurs resulting in the reboot of the device, after reboot the device is back in normal operation.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3864US | medium4.5OT erhöht | — | ||
A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal oper… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cybersecurity Advisory - IEC 61850 MMS-Server Vulnerability in Hitachi Energy’s Relion®670, 650 series and SAM600-IO Productsself
- ICS Advisory ICSA-23-068-05 JSONself
- ICS Advisory ICSA-23-068-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationRelion 650
Apply General Mitigation Factors
- MitigationRelion 670
Apply General Mitigation Factors
- BehobenRelion 650
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
- BehobenRelion 670
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
- BehobenSAM600-IO
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan