CVE Feed

    Dashboard / CVE / CVE-2023-4518

    CVE-2023-4518

    A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.

    Published:Dec 1, 2023
    Last Modified:Nov 21, 2024
    EPS:Dec 1, 2023
    EPSS Score:0.00108
    CVSS Score:6.5

    Affected Products

    Vendor
    Hitachienergy
    Product
    Relion 650
    Vendor
    Hitachienergy
    Product
    Relion 650 Firmware
    Vendor
    Hitachienergy
    Product
    Relion 670
    Vendor
    Hitachienergy
    Product
    Relion 670 Firmware
    Vendor
    Hitachienergy
    Product
    Relion Sam600-io
    Vendor
    Hitachienergy
    Product
    Relion Sam600-io Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-3864 (CVSS 4.5) — A vulnerability exists in the Relion update package signature validation. A tampered update package could cau…
    CVE-2022-3353 (CVSS 5.9) — A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. …
    CVE-2021-35534 (CVSS 7.2) — Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670…
    CVE-2021-35535 (CVSS 8.1) — Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker …
    CVE-2021-27196 (CVSS 7.5) — Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, R…
    CVE-2019-18247 (CVSS 7.5) — An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Rel…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High