CVE Feed

    Dashboard / CVE / CVE-2019-18253

    CVE-2019-18253

    An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

    Published:Nov 27, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 27, 2019
    EPSS Score:0.00394
    CVSS Score:10

    Affected Products

    Vendor
    Hitachienergy
    Product
    Relion 670
    Vendor
    Hitachienergy
    Product
    Relion 670 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-3864 (CVSS 4.5) — A vulnerability exists in the Relion update package signature validation. A tampered update package could cau…
    CVE-2023-4518 (CVSS 6.5) — A vulnerability exists in the input validation of the GOOSE messages where out of range values received and p…
    CVE-2022-3353 (CVSS 5.9) — A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. …
    CVE-2021-35534 (CVSS 7.2) — Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670…
    CVE-2021-35535 (CVSS 8.1) — Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker …
    CVE-2021-27196 (CVSS 7.5) — Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, R…
    CVE-2019-18247 (CVSS 7.5) — An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Rel…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High