CVE-2022-3353

IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products

State: Published
Severity: 5.9 Medium
Published: Feb 21, 2023
Updated: Mar 12, 2025
Reserved: Sep 28, 2022

Description

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.

An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.

Already existing/established client-server connections are not affected.

List of affected CPEs:

* cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	Hitachi Energy

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
FOX61x TEGO1Hitachi Energy	tego1_r16a11Not affected tego1_r15b08Affected tego1_r2a16_03Affected tego1_r2a16Affected tego1_r1e01Affected tego1_r1d02Affected tego1_r1c07Affected tego1_r1b02Affected
GMS600Hitachi Energy	GMS600 1.3Affected
ITT600 SA ExplorerHitachi Energy	ITT600 SA Explorer 1.1.0Affected ITT600 SA Explorer 1.1.1Affected ITT600 SA Explorer 1.1.2Affected ITT600 SA Explorer 1.5.0Affected ITT600 SA Explorer 1.5.1Affected ITT600 SA Explorer 1.6.0Affected ITT600 SA Explorer 1.6.0.1Affected ITT600 SA Explorer 1.7.0Affected ITT600 SA Explorer 1.7.2Affected ITT600 SA Explorer 1.8.0Affected ITT600 SA Explorer 2.0.1Affected ITT600 SA Explorer 2.0.2Affected ITT600 SA Explorer 2.0.3Affected ITT600 SA Explorer 2.0.4.1Affected ITT600 SA Explorer 2.0.5.0Affected ITT600 SA Explorer 2.0.5.4Affected ITT600 SA Explorer 2.1.0.4Affected ITT600 SA Explorer 2.1.0.5Affected ITT600 SA Explorer 2.1.1.2Not affected
MicroSCADA X SYS600Hitachi Energy	SYS600 10Affected SYS600 10.1Affected SYS600 10.1.1Affected SYS600 10.2Affected SYS600 10.2.1Affected SYS600 10.3Affected SYS600 10.3.1Affected SYS600 10.4Affected SYS600 10.4.1Not affected
MSMHitachi Energy	MSM 2.2.3;0Affected
PWC600Hitachi Energy	PWC600 1.0Affected PWC600 1.1Affected PWC600 1.2Affected
REB500Hitachi Energy	REB500 7.0 to before 7.Affected REB500 8.0 to before 8.Affected REB500 8.3.3.0Not affected
Relion® 670Hitachi Energy	Relion 670 1.2Affected Relion 670 2.0Affected Relion 670 version 2.1Affected Relion 670 2.2.0Affected Relion 670 2.2.1Affected Relion 670 2.2.2Affected Relion 670 2.2.3Affected Relion 670 2.2.4Affected Relion 670 2.2.5Affected
Relion® 650Hitachi Energy	Relion 650 1.1Affected Relion 650 1.3Affected Relion 650 2.1Affected Relion 650 2.2.0Affected Relion 650 2.2.1Affected Relion 650 2.2.2Affected Relion 650 2.2.3Affected Relion 650 2.2.4Affected Relion 650 2.2.5Affected
SAM600-IOHitachi Energy	Relion SAM600-IO 2.2.1Affected Relion SAM600-IO 2.2.5Affected
RTU500Hitachi Energy	RTU500 12.0.1 through 12.0.14Affected RTU500 12.0.15Not affected RTU500 12.2.1 through 12.2.11Affected RTU500 12.2.12Not affected RTU500 12.4.1 through 12.4.11Affected RTU500 12.4.12Not affected RTU500 12.6.1 through 12.6.8Affected RTU500 12.6.9Not affected RTU500 12.7.1 through 12.7.4Affected RTU500 12.7.5Not affected RTU500 13.2.1 through 13.2.5Affected RTU500 13.2.6Not affected RTU500 13.3.1 through 13.3.3Affected RTU500 13.3.4Not affected RTU500 13.4.1Affected RTU500 13.4.2Not affected
TXpert Hub CoreTec 4Hitachi Energy	CoreTec 4 version 2.0.Affected CoreTec 4 version 2.1.Affected CoreTec 4 version 2.2.Affected CoreTec 4 version 2.3.Affected CoreTec 4 version 2.4.Affected CoreTec 4 version 3.0.Affected
TXpert Hub CoreTec 5Hitachi Energy	CoreTec 5 version 3.0.*Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.