High severity · published Dec 19, 2023
CVE-2023-6711
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rtu500 Firmware · Hitachienergy
12.0.1.0 before 12.0.15.0; 12.2.1.0 before 12.2.12.0; 12.4.1.0 before 12.4.12.0; 12.6.1.0 before 12.6.10.0; 12.7.1.0 before 12.7.7.0; 13.2.1.0 before 13.2.7.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6711
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6711
Vendor Advisory
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184&languageCode=en&Preview=true
More from Rtu500 Firmware
7.5
CVE-2022-4608
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product
7.5
CVE-2022-2502
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product
7.5
CVE-2022-3353
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially…
7.5
CVE-2022-28613
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above
7.5
CVE-2021-35533
Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an…