CVE-2022-3864

mediumpriority · track · 18OT risk · elevatedEPSS 0.004 · 29 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.35% (29th) EPSS

CVSS 4.5 · medium

Is it mine?

47 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and attempt to update the IED with a malicious update package. Successful exploitation of this vulnerability will cause the IED to restart, causing a temporary Denial of Service.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRelion 650cisa_csaf_ot
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
FixedRelion 670cisa_csaf_ot
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
FixedSAM600-IOcisa_csaf_ot
For more information, see Hitachi Energy cybersecurity advisory 8DBD000146 at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en .
MitigationRelion 650cisa_csaf_ot
Apply General Mitigation Factors
MitigationRelion 670cisa_csaf_ot
Apply General Mitigation Factors

cvss

Technical severity, 0–10. One row per scoring source.

4.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 3.6

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:Hsecondary · CISA US

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:Hsecondary · cybersecurity@hitachienergy.comexploitability 0.9 · impact 3.6

v3.14.1mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-347USprimaryCWE-345US

affected products (47)

Products and version ranges known to be affected.

Hitachi Energy Relion 650 2.2.0all versionscert_bundDEcpe:/h:abb:relion:650_2.2.0
Hitachi Energy Relion 650 2.2.4all versionscert_bundDEcpe:/h:abb:relion:650_2.2.4
Hitachi Energy Relion 650 2.2.5all versionscert_bundDEcpe:/h:abb:relion:650_2.2.5
Hitachi Energy Relion 670 2.2.0all versionscert_bundDEcpe:/h:abb:relion:670_2.2.0
Hitachi Energy Relion 670 2.2.2all versionscert_bundDEcpe:/h:abb:relion:670_2.2.2
Hitachi Energy Relion 670 2.2.3all versionscert_bundDEcpe:/h:abb:relion:670_2.2.3
Hitachi Energy Relion 670 2.2.4all versionscert_bundDEcpe:/h:abb:relion:670_2.2.4
Hitachi Energy Relion 670 2.2.5all versionscert_bundDEcpe:/h:abb:relion:670_2.2.5
Relion 650 series version 2.2.0 all revisionsall versionscisa_csaf_otUS
Relion 650 series version 2.2.1 revisions up to 2.2.1.8all versionscisa_csaf_otUS
Relion 650 series version 2.2.4 revisions up to 2.2.4.3all versionscisa_csaf_otUS
Relion 650 series version 2.2.5 revisions up to 2.2.5.5all versionscisa_csaf_otUS
Relion 670 series version 2.2.0 all revisionsall versionscisa_csaf_otUS
Relion 670 series version 2.2.1 revisions up to 2.2.1.8all versionscisa_csaf_otUS
Relion 670 series version 2.2.2 revisions up to 2.2.2.5all versionscisa_csaf_otUS
Relion 670 series version 2.2.3 revisions up to 2.2.3.6all versionscisa_csaf_otUS
Relion 670 series version 2.2.4 revisions up to 2.2.4.3all versionscisa_csaf_otUS
Relion 670 series version 2.2.5 revisions up to 2.2.5.5all versionscisa_csaf_otUS
SAM600-IO series version 2.2.1 revisions up to 2.2.1.8all versionscisa_csaf_otUS
Hitachi Energy Relion 650≤ 2.2.0cisa_csaf_otUS

showing 20 of 47

advisories (2)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-0610Hitachi Energy Relion: Schwachstelle ermöglicht Denial of ServiceDeutsch2023-03-09csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hitachi Energy Relion ausnutzen, um einen Denial of Service Angriff durchzuführen.
ICSA-23-068-05Hitachi Energy Relion 670, 650 and SAM600-IO Series2023-02-28icsa · cisa_csaf_otUS
Hitachi Energy is aware of a report from Nozomi Networks Labs, concerning the vulnerability CVE-2022-3864 affecting the Relion 670/650/SAM600-IO series versions listed below. Recommended actions for each affected version are listed in the “Recommended Immediate Actions” section of this document. An attacker who manages to get access with security privileges to the device, can start the update mechanism, supplying a malicious update package to the IED. When the system attempts to verify the tampered update package, a crash occurs resulting in the reboot of the device, after reboot the device is back in normal operation.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund cisa_csaf_ot NVD CVE.org MITRE

published 2024-01-04modified 2026-06-17

related (1,048)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-67276US	high8.1OT critical	8.94% (95th)	Exploit	2026-09-05
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the expo…
CVE-2026-5430US	—OT critical	22.4% (98th)	KEV	2026-08-06
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupport…
CVE-2026-48558US	—OT critical	77.7% (100th)	KEV	2026-06-12
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is config…
CVE-2025-59719US	—OT critical	29.2% (98th)	—	2025-12-09
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticate…
CVE-2025-59718US	—OT critical	68.3% (99th)	KEV	2025-12-09
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 t…

+1043 more

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan