CVE-2023-4518

State: Published
Severity: 6.5 Medium
Published: Dec 1, 2023
Updated: Sep 23, 2024
Reserved: Aug 24, 2023

Description

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Hitachi Energy

Weaknesses

CWE-1284 Improper Validation of Specified Quantity in Input

Affected Products

Product	Versions
Relion670Hitachi Energy	Relion 670 series version 2.2.0 all revisionsAffected Relion 670/650/SAM600-IO series version 2.2.1 all revisionsAffected elion 670 series version 2.2.2 all revisionsAffected Relion 670 series version 2.2.3 all revisionsAffected Relion 670/650 series version 2.2.4 all revisionsAffected Relion 670/650/SAM600-IO series version 2.2.5 all revisionsAffected

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.