Heimdall Security Logo

CVE-2022-3353

Vulnérabilité moyenne dans FOX61x TEGO1 (Hitachi Energy)

CVSS 5.9 · Moyenne
EPSS 1.1%
Hitachi Energy•FOX61x TEGO1•Versions : Relion 650 1.1, ITT600 SA Explorer 1.6.0, RTU500 12.7.1, SYS600 10.3, Relion 650 2.1, ITT600 SA Explorer 1.1.1, Relion 650 2.2.5, Relion 670 2.2.2, ITT600 SA Explorer 2.0.5.0, tego1_r2a16_03, <=12.7.4, Relion 670 2.2.0, Relion 670 2.2.3, ITT600 SA Explorer 2.1.0.5, ITT600 SA Explorer 2.0.2, RTU500 12.4.1, MSM 2.2.3;0, REB500 7.0, Relion 650 2.2.3, Relion 650 2.2.4, RTU500 12.6.1, RTU500 13.4.1, tego1_r1c07, ITT600 SA Explorer 2.0.3, Relion SAM600-IO 2.2.5, ITT600 SA Explorer 1.7.2, <=12.0.14, PWC600 1.1, ITT600 SA Explorer 1.5.0, SYS600 10, PWC600 1.0, Relion 670 2.2.4, tego1_r1e01, Relion 670 2.2.1, <=12.4.11, CoreTec 4 version 2.0.*, ITT600 SA Explorer 2.1.1.2, RTU500 12.2.1, SYS600 10.1, SYS600 10.1.1, RTU500 13.2.1, ITT600 SA Explorer 2.0.5.4, Relion 670 1.2, tego1_r1d02, CoreTec 4 version 2.4.*, RTU500 12.6.9, PWC600 1.2, REB500 8.0, Relion 650 1.3, SYS600 10.4, ITT600 SA Explorer 1.7.0, Relion 670 2.2.5, ITT600 SA Explorer 1.6.0.1, <=12.6.8, Relion 670 version 2.1, RTU500 12.4.12, ITT600 SA Explorer 2.0.1, Relion 670 2.0, Relion 650 2.2.1, ITT600 SA Explorer 1.1.0, tego1_r2a16, Relion SAM600-IO 2.2.1, tego1_r1b02, RTU500 12.7.5, CoreTec 5 version 3.0.*, REB500 8.3.3.0, SYS600 10.2, ITT600 SA Explorer 1.5.1, <=13.2.5, ITT600 SA Explorer 1.1.2, Relion 650 2.2.2, RTU500 13.3.4, CoreTec 4 version 2.1.*, tego1_r16a11, <7.*, RTU500 13.2.6, RTU500 12.2.12, RTU500 12.0.1, RTU500 13.3.1, SYS600 10.2.1, <=13.3.3, ITT600 SA Explorer 2.1.0.4, SYS600 10.3.1, CoreTec 4 version 3.0.*, ITT600 SA Explorer 1.8.0, Relion 650 2.2.0, ITT600 SA Explorer 2.0.4.1, CoreTec 4 version 2.3.*, GMS600 1.3, tego1_r15b08, <8.*, RTU500 12.0.15, RTU500 13.4.2, SYS600 10.4.1, <=12.2.11, CoreTec 4 version 2.2.*

Description

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.  Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*

Gravité et risque d'exploitation

CVE-2022-3353 obtient un score CVSS de 5.9/10, soit une gravité moyenne. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 1.10 %, ce qui la place devant 65.3 % des CVE référencées.

Que faire ?

  • Vérifiez si FOX61x TEGO1 (versions Relion 650 1.1, ITT600 SA Explorer 1.6.0, RTU500 12.7.1, SYS600 10.3, Relion 650 2.1, ITT600 SA Explorer 1.1.1, Relion 650 2.2.5, Relion 670 2.2.2, ITT600 SA Explorer 2.0.5.0, tego1_r2a16_03, <=12.7.4, Relion 670 2.2.0, Relion 670 2.2.3, ITT600 SA Explorer 2.1.0.5, ITT600 SA Explorer 2.0.2, RTU500 12.4.1, MSM 2.2.3;0, REB500 7.0, Relion 650 2.2.3, Relion 650 2.2.4, RTU500 12.6.1, RTU500 13.4.1, tego1_r1c07, ITT600 SA Explorer 2.0.3, Relion SAM600-IO 2.2.5, ITT600 SA Explorer 1.7.2, <=12.0.14, PWC600 1.1, ITT600 SA Explorer 1.5.0, SYS600 10, PWC600 1.0, Relion 670 2.2.4, tego1_r1e01, Relion 670 2.2.1, <=12.4.11, CoreTec 4 version 2.0.*, ITT600 SA Explorer 2.1.1.2, RTU500 12.2.1, SYS600 10.1, SYS600 10.1.1, RTU500 13.2.1, ITT600 SA Explorer 2.0.5.4, Relion 670 1.2, tego1_r1d02, CoreTec 4 version 2.4.*, RTU500 12.6.9, PWC600 1.2, REB500 8.0, Relion 650 1.3, SYS600 10.4, ITT600 SA Explorer 1.7.0, Relion 670 2.2.5, ITT600 SA Explorer 1.6.0.1, <=12.6.8, Relion 670 version 2.1, RTU500 12.4.12, ITT600 SA Explorer 2.0.1, Relion 670 2.0, Relion 650 2.2.1, ITT600 SA Explorer 1.1.0, tego1_r2a16, Relion SAM600-IO 2.2.1, tego1_r1b02, RTU500 12.7.5, CoreTec 5 version 3.0.*, REB500 8.3.3.0, SYS600 10.2, ITT600 SA Explorer 1.5.1, <=13.2.5, ITT600 SA Explorer 1.1.2, Relion 650 2.2.2, RTU500 13.3.4, CoreTec 4 version 2.1.*, tego1_r16a11, <7.*, RTU500 13.2.6, RTU500 12.2.12, RTU500 12.0.1, RTU500 13.3.1, SYS600 10.2.1, <=13.3.3, ITT600 SA Explorer 2.1.0.4, SYS600 10.3.1, CoreTec 4 version 3.0.*, ITT600 SA Explorer 1.8.0, Relion 650 2.2.0, ITT600 SA Explorer 2.0.4.1, CoreTec 4 version 2.3.*, GMS600 1.3, tego1_r15b08, <8.*, RTU500 12.0.15, RTU500 13.4.2, SYS600 10.4.1, <=12.2.11, CoreTec 4 version 2.2.*) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE