Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-4518
PUBLISHED
More InfoOfficial Page
Assigner-Hitachi Energy
Assigner Org ID-e383dce4-0c27-4495-91c4-0db157728d17
View Known Exploited Vulnerability (KEV) details
Published At-01 Dec, 2023 | 14:18
Updated At-23 Sep, 2024 | 12:21
Rejected At-
▼CVE Numbering Authority (CNA)

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.

Affected Products
Vendor
Hitachi Energy Ltd.Hitachi Energy
Product
Relion670
Default Status
affected
Versions
Affected
  • Relion 670 series version 2.2.0 all revisions
  • Relion 670/650/SAM600-IO series version 2.2.1 all revisions
  • elion 670 series version 2.2.2 all revisions
  • Relion 670 series version 2.2.3 all revisions
  • Relion 670/650 series version 2.2.4 all revisions
  • Relion 670/650/SAM600-IO series version 2.2.5 all revisions
Problem Types
TypeCWE IDDescription
CWECWE-1284CWE-1284 Improper Validation of Specified Quantity in Input
Type: CWE
CWE ID: CWE-1284
Description: CWE-1284 Improper Validation of Specified Quantity in Input
Metrics
VersionBase scoreBase severityVector
3.16.5MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
N/A
Hyperlink: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
Resource: N/A
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
x_transferred
Hyperlink: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
Resource:
x_transferred
Details not found