CVE-2023-6711
Medium
Description
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.
SeverityMedium
CVSS5.9
Exploit probability—
ProductHitachienergy Rtu500 Firmware
PublishedDec 19, 2023
First seenDec 19, 2023
Weakness typeCWE-120CWE-120
How to fix
Update
- hitachienergy rtu500_firmware12.0.15.0, 12.2.12.0, 12.4.12.0, 12.6.10.0, 12.7.7.0, 13.2.7.0, 13.4.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachienergy rtu500_firmware | 12.0.1.0 ≤ v < 12.0.15.0, 12.2.1.0 ≤ v < 12.2.12.0, 12.4.1.0 ≤ v < 12.4.12.0, 12.6.1.0 ≤ v < 12.6.10.0, 12.7.1.0 ≤ v < 12.7.7.0, 13.2.1.0 ≤ v < 13.2.7.0, 13.4.1.0 ≤ v < 13.4.4.0, 13.5.1.0 | 12.0.15.0, 12.2.12.0, 12.4.12.0, 12.6.10.0, 12.7.7.0, 13.2.7.0, 13.4.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.