CVE-2022-2081

State: Published
Severity: 7.5 High
Published: Jan 4, 2024
Updated: May 22, 2025
Reserved: Jun 14, 2022

Description

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Hitachi Energy

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
RTU500 series CMU firmwareHitachi Energy	12.0.1.0 through 12.0.13.0Affected 12.2.1.0 through 12.2.11.0Affected 12.4.1.0 through 12.4.11.0Affected 12.6.1.0 through 12.6.7.0Affected 12.7.1.0 through 12.7.3.0Affected 13.2.1.0 through 13.2.4.0Affected 13.3.1.0Affected

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.