Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-3353
HistoryFeb 21, 2023 - 2:15 p.m.

CVE-2022-3353

2023-02-2114:15:13
CWE-404
[email protected]
web.nvd.nist.gov
1
iec 61850 communication stack
hitachi energy
vulnerability
cpes affected
iec 61850 mms-server

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.

An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections.

Already existing/established client-server connections are not affected.

List of affected CPEs:

  • cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:::::::*
  • cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:::::::*
  • cpe:2.3:a:hitachienergy:gms600:1.3.0:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.:::::::
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.:::::::
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.:::::::
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:::::::*
  • cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.:::::::
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:::::::*
  • cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:::::::*
  • cpe:2.3:a:hitachienergy:mms:2.2.3:::::::*
  • cpe:2.3:a:hitachienergy:pwc600:1.0:::::::*
  • cpe:2.3:a:hitachienergy:pwc600:1.1:::::::*
  • cpe:2.3:a:hitachienergy:pwc600:1.2:::::::*
  • cpe:2.3:o:hitachienergy:reb500:7::::::::
  • cpe:2.3:o:hitachienergy:reb500:8:::::::*
  • cpe:2.3:o:hitachienergy:relion670:1.2.:::::::
  • cpe:2.3:o:hitachienergy:relion670:2.0.:::::::
  • cpe:2.3:o:hitachienergy:relion650:1.1.:::::::
  • cpe:2.3:o:hitachienergy:relion650:1.3.:::::::
  • cpe:2.3:o:hitachienergy:relion650:2.1.:::::::
  • cpe:2.3:o:hitachienergy:relion670:2.1.:::::::
  • cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:::::::*
  • cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:::::::*
  • cpe:2.3:o:hitachienergy:relion670:2.2.:::::::
  • cpe:2.3:o:hitachienergy:relion650:2.2.:::::::
  • cpe:2.3:o:hitachienergy:rtu500cmu:12..:::::::*
  • cpe:2.3:a:hitachienergy:rtu500cmu:13..:::::::*
  • cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.:::::::
  • cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:::::::*
  • cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:::::::*

Affected configurations

NVD
Node
hitachienergysys600_firmwareRange10.1–10.3.1
AND
hitachienergysys600Match-
Node
hitachienergyrtu500_firmwareRange12.0.1.0–12.0.14.0
OR
hitachienergyrtu500_firmwareRange12.2.1.0–12.2.11.0
OR
hitachienergyrtu500_firmwareRange12.4.1.0–12.4.11.0
OR
hitachienergyrtu500_firmwareRange12.6.1.0–12.6.8.0
OR
hitachienergyrtu500_firmwareRange12.7.1.0–12.7.4.0
OR
hitachienergyrtu500_firmwareRange13.2.1.0–13.2.5.0
OR
hitachienergyrtu500_firmwareRange13.3.1–13.3.3
OR
hitachienergyrtu500_firmwareMatch13.4.1
AND
hitachienergyrtu500Match-
Node
hitachienergyreb500_firmwareRange7.0–8.3.3
AND
hitachienergyreb500Match-
Node
hitachienergypwc600_firmwareMatch1.0
OR
hitachienergypwc600_firmwareMatch1.1
OR
hitachienergypwc600_firmwareMatch1.2
AND
hitachienergypwc600Match-
Node
hitachienergymodular_switchgear_monitoring_firmwareRange≤2.2.3
AND
hitachienergymodular_switchgear_monitoringMatch-
Node
hitachienergyitt600_sa_explorerMatch1.1.0
OR
hitachienergyitt600_sa_explorerMatch1.1.1
OR
hitachienergyitt600_sa_explorerMatch1.1.2
OR
hitachienergyitt600_sa_explorerMatch1.5.0
OR
hitachienergyitt600_sa_explorerMatch1.5.1
OR
hitachienergyitt600_sa_explorerMatch1.6.0
OR
hitachienergyitt600_sa_explorerMatch1.6.0.1
OR
hitachienergyitt600_sa_explorerMatch1.7.0
OR
hitachienergyitt600_sa_explorerMatch1.7.2
OR
hitachienergyitt600_sa_explorerMatch1.8.0
OR
hitachienergyitt600_sa_explorerMatch2.0.1
OR
hitachienergyitt600_sa_explorerMatch2.0.2
OR
hitachienergyitt600_sa_explorerMatch2.0.3
OR
hitachienergyitt600_sa_explorerMatch2.0.4.1
OR
hitachienergyitt600_sa_explorerMatch2.0.5.0
OR
hitachienergyitt600_sa_explorerMatch2.0.5.4
OR
hitachienergyitt600_sa_explorerMatch2.1.0.4
OR
hitachienergyitt600_sa_explorerMatch2.1.0.5
Node
hitachienergyrelion_sam600-io_firmwareMatch2.2.1
OR
hitachienergyrelion_sam600-io_firmwareMatch2.2.5
AND
hitachienergyrelion_sam600-ioMatch-
Node
hitachienergyrelion_650_firmwareMatch1.1
OR
hitachienergyrelion_650_firmwareMatch1.3
OR
hitachienergyrelion_650_firmwareMatch2.1
OR
hitachienergyrelion_650_firmwareMatch2.2.0
OR
hitachienergyrelion_650_firmwareMatch2.2.1
OR
hitachienergyrelion_650_firmwareMatch2.2.2
OR
hitachienergyrelion_650_firmwareMatch2.2.3
OR
hitachienergyrelion_650_firmwareMatch2.2.4
OR
hitachienergyrelion_650_firmwareMatch2.2.5
AND
hitachienergyrelion_650Match-
Node
hitachienergyrelion_670_firmwareMatch1.2
OR
hitachienergyrelion_670_firmwareMatch2.0
OR
hitachienergyrelion_670_firmwareMatch2.1
OR
hitachienergyrelion_670_firmwareMatch2.2.0
OR
hitachienergyrelion_670_firmwareMatch2.2.1
OR
hitachienergyrelion_670_firmwareMatch2.2.2
OR
hitachienergyrelion_670_firmwareMatch2.2.3
OR
hitachienergyrelion_670_firmwareMatch2.2.4
OR
hitachienergyrelion_670_firmwareMatch2.2.5
AND
hitachienergyrelion_670Match-
Node
hitachienergygms600_firmwareMatch1.3.0
AND
hitachienergygms600Match-
Node
hitachienergyfox615_tego1_firmwareMatchr1b02
OR
hitachienergyfox615_tego1_firmwareMatchr1c07
OR
hitachienergyfox615_tego1_firmwareMatchr1d02
OR
hitachienergyfox615_tego1_firmwareMatchr1e01
OR
hitachienergyfox615_tego1_firmwareMatchr2b16
OR
hitachienergyfox615_tego1_firmwareMatchr2b16_03
OR
hitachienergyfox615_tego1_firmwareMatchr15b08
AND
hitachienergyfox615_tego1Match-
Node
hitachienergytxpert_hub_coretec_4_firmwareRange2.0.0–3.0.0
AND
hitachienergytxpert_hub_coretec_4Match-
Node
hitachienergytxpert_hub_coretec_5_firmwareMatch3.0.0
AND
hitachienergytxpert_hub_coretec_5Match-

References

Related

cvelist 1
nessus 1
ics 1
cve 1
prion 1
cvelist
cvelist
CVE-2022-3353 IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
2023-02-21 13:50:46
nessus
nessus
Hitachi Energy IEC 61850 MMS-Server Improper Resource Shutdown or Release (CVE-2022-3353)
2023-03-29 00:00:00
ics
ics
Hitachi Energy IEC 61850 MMS-Server
2023-03-30 12:00:00
cve
cve
CVE-2022-3353
2023-02-21 14:15:13
prion
prion
Code injection
2023-02-21 14:15:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON
Related for NVD:CVE-2022-3353
cvelist1nessus1ics1cve1prion1