CVE-2023-4518
A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@hitachienergy.com
- Published
- 2023-12-01
- Last modified
- 2024-09-23
- Weaknesses
- CWE-1284
Affected products
- Relion670 (Hitachi Energy)
- Relion 650 Firmware (Hitachienergy)
- Relion 670 Firmware (Hitachienergy)
- Relion Sam600-io Firmware (Hitachienergy)
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
