CVE-2022-28613
High
Description
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAbb Rtu500 Firmware
PublishedMay 2, 2022
First seenMay 2, 2022
Weakness typeCWE-1284CWE-1284
How to fix
Update
- abb rtu500_firmware12.2.12.0 or later
- hitachienergy rtu500_firmware12.0.14.0, 12.4.12.0, 12.6.8.0, 12.7.4.0, 13.2.5.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb rtu500_firmware | 12.2.1.0 ≤ v < 12.2.12.0 | 12.2.12.0 |
| hitachienergy rtu500_firmware | 12.0.1.0 ≤ v < 12.0.14.0, 12.4.1.0 ≤ v < 12.4.12.0, 12.6.1.0 ≤ v < 12.6.8.0, 12.7.1.0 ≤ v < 12.7.4.0, 13.2.1.0 ≤ v < 13.2.5.0 | 12.0.14.0, 12.4.12.0, 12.6.8.0, 12.7.4.0, 13.2.5.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.