CVE-2021-35534

highPriorität · verfolgen · 30EPSS 0.018 · 78. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.79% (78th) EPSS
CVSS 9 · high
Is it mine?
88 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product. This issue affects: Hitachi Energy Relion 670 Series 2.0 all revisions; 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.5. Hitachi Energy Relion 670/650 Series 2.1 all revisions. 2.2.0 all revisions; 2.2.4 all revisions; Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions; 2.2.5 versions prior to 2.2.5.2. Hitachi Energy Relion 650 1.0 all revisions. 1.1 all revisions; 1.2 all revisions; 1.3 versions prior to 1.3.0.8; Hitachi Energy GMS600 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 1.0.1 version 1.0.1.4 and prior versions; 1.1.0 version 1.1.0.1 and prior versions.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenGMS600cisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenPWC600cisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenRelion 650 seriescisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenRelion 670 Seriescisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenRelion 670/650 Seriescisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenRelion 670/650/SAM600-IO Seriescisa_csaf_ot

    Relion 650 series Version 1.2: Update to Version 1.3

  • BehobenHitachi Energy Relion 650 series version 1.3.0.8cisa_csaf_ot

    Update to Relion 650 series version 1.3.0.8

  • BehobenHitachi Energy Relion 650 series version 2.1.0 revisions up to 2.1.0.4cisa_csaf_ot

    Update to Relion 670/650 series version 2.1.0.5

  • BehobenHitachi Energy Relion 650 series version 2.2.1 revisions up to 2.2.1.7cisa_csaf_ot

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion 650 series version 2.2.4 revisions up to 2.2.4.2cisa_csaf_ot

    Update to Relion 670/650 series version 2.2.4.3

  • BehobenHitachi Energy Relion 670 series version 2.0.0 revisions up to 2.0.0.13cisa_csaf_ot

    Update to Relion 670/650 series version 2.0.0.14

  • BehobenHitachi Energy Relion 670 series version 2.1.0 revisions up to 2.1.0.4cisa_csaf_ot

    Update to Relion 670/650 series version 2.1.0.5

  • BehobenHitachi Energy Relion 670 series version 2.2.1 revisions up to 2.2.1.7cisa_csaf_ot

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion 670 series version 2.2.2 revisions up to 2.2.2.4cisa_csaf_ot

    Update to Relion 670 series version 2.2.2.5

  • BehobenHitachi Energy Relion 670 series version 2.2.3 revisions up to 2.2.3.4cisa_csaf_ot

    Update to Relion 670 series version 2.2.3.5

  • BehobenHitachi Energy Relion 670 series version 2.2.4 revisions up to 2.2.4.2cisa_csaf_ot

    Update to Relion 670/650 series version 2.2.4.3

  • BehobenHitachi Energy Relion 670 series version 2.2.5 up to revision 2.2.5.1cisa_csaf_ot

    Update to Relion 670/650/SAM600-IO series version 2.2.5.2

  • BehobenHitachi Energy Relion SAM600-IO series version 2.2.1 revisions up to 2.2.1.7cisa_csaf_ot

    Update to Relion 670/650/SAM600-IO series version 2.2.1.8

  • BehobenHitachi Energy Relion SAM600-IO series version 2.2.5 up to revision 2.2.5.1cisa_csaf_ot

    Update to Relion 670/650/SAM600-IO series version 2.2.5.2

  • MitigationGMS600cisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationPWC600cisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationRelion 650 seriescisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationRelion 670 Seriescisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationRelion 670/650 Seriescisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationRelion 670/650/SAM600-IO Seriescisa_csaf_ot

    Do not directly connect to the Internet.

  • MitigationHitachi Energy Relion 650 series version 1.0.0 all revisionscisa_csaf_ot

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

  • MitigationHitachi Energy Relion 650 series version 1.1.0 all revisionscisa_csaf_ot

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

  • MitigationHitachi Energy Relion 650 series version 1.2.0 all revisionscisa_csaf_ot

    Refer to the Mitigation Factors/Workaround Section for the current mitigation strategy or upgrade to Relion 650 series version 1.3.

  • MitigationHitachi Energy Relion 670 series version 2.2.0 all revisionscisa_csaf_ot

    Refer to the General Mitigation Factors/Workaround Section for the current mitigation strategy.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–9

v2.09highAV:N/AC:L/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 10
v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.2 · Auswirkung 5.9
v3.07.2highCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · cybersecurity@hitachienergy.comAusnutzbarkeit 1.2 · Auswirkung 5.9
v3.16.6mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-269USprimärCWE-274USCWE-274USCWE-284US
04

betroffene Produkte (88)

Betroffene Produkte und Versionsbereiche.

20 von 88 angezeigt
05

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • WID-SEC-W-2025-0436Hitachi Energy Relion: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2021-12-09csaf · cert_bundDE

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hitachi Energy Relion ausnutzen, um seine Privilegien zu erhöhen.

  • ICSA-21-343-01Hitachi Energy GMS600, PWC600, and Relion2021-12-09icsa · cisa_csaf_otUS

    This updated advisory is a follow-up to the original advisory titled ICSA-21-343-01 Hitachi Energy GMS600, PWC600, and Relion that was published December 9, 2021, on the ICS webpage at cisa.gov/ics.

  • ICSA-25-065-02Hitachi Energy Relion 670/650/SAM600-IO2021-11-04icsa · cisa_csaf_otUS

    Hitachi Energy is aware of a vulnerability report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion® 670/650/SAM600-IO series versions listed below. Remediation is available for some versions. Recommended actions for each affected version are listed in the Recommended Immediate Actions Section. An attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcert_bundcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2021-11-18geändert 2026-06-17
09

Referenzen (13)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan