Input validation

2023-12-0115:15:00

PRIOn knowledge base

www.prio-n.com

input validation

vulnerability

goose message

device reboot

attacker

configured blocks

nvd

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

A vulnerability exists in the input validation of the GOOSE
messages where out of range values received and processed
by the IED caused a reboot of the device. In order for an
attacker to exploit the vulnerability, goose receiving blocks need
to be configured.

CPENameOperatorVersion
relion_650_firmwarege2.2.4
relion_650_firmwarelt2.2.4.4
relion_650_firmwarege2.2.5
relion_650_firmwarelt2.2.5.6
relion_650_firmwareeq2.2.1
relion_650_firmwareeq2.2.1.6
relion_670_firmwarege2.2.0
relion_670_firmwarelt2.2.2.6
relion_670_firmwarege2.2.3
relion_670_firmwarelt2.2.3.7

Name	Operator	Version
relion_650_firmware	ge	2.2.4
relion_650_firmware	lt	2.2.4.4
relion_650_firmware	ge	2.2.5
relion_650_firmware	lt	2.2.5.6
relion_650_firmware	eq	2.2.1
relion_650_firmware	eq	2.2.1.6
relion_670_firmware	ge	2.2.0
relion_670_firmware	lt	2.2.2.6
relion_670_firmware	ge	2.2.3
relion_670_firmware	lt	2.2.3.7