Medium severity · published Dec 4, 2023
CVE-2023-5768
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below
6.1
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.
Incomplete or wrong received APDU frame layout may
cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer
with wrong length information of APDU or delayed reception
of data octets.
Only communication link of affected HCI IEC 60870-5-104
is blocked. If attack sequence stops the communication to
the previously attacked link gets normal again.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rtu520 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu530 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu540 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu560 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-5768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-5768
Vendor Advisory
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=true
More from Rtu520 Firmware
7.5
CVE-2026-1773
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality…
7.5
CVE-2022-2081
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above
6.1
CVE-2023-5769
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below
6.1
CVE-2023-5767
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below
5.3
CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information