CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

Score

CVSS 3.1 10.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-11-27

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Relion 670 Firmware (Hitachienergy)

References

• https://www.us-cert.gov/ics/advisories/icsa-19-330-01