VYPR
← All advisories
High severity7.2NVD Advisory· Published Nov 18, 2021· Updated Jun 17, 2026

CVE-2021-35534

CVE-2021-35534

Description

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product. This issue affects: Hitachi Energy Relion 670 Series 2.0 all revisions; 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.5. Hitachi Energy Relion 670/650 Series 2.1 all revisions. 2.2.0 all revisions; 2.2.4 all revisions; Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions; 2.2.5 versions prior to 2.2.5.2. Hitachi Energy Relion 650 1.0 all revisions. 1.1 all revisions; 1.2 all revisions; 1.3 versions prior to 1.3.0.8; Hitachi Energy GMS600 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 1.0.1 version 1.0.1.4 and prior versions; 1.1.0 version 1.1.0.1 and prior versions.

Affected products

41
  • Hitachienergy/Gms600 Firmware3 versions
    cpe:2.3:o:hitachienergy:gms600_firmware:1.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:hitachienergy:gms600_firmware:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:gms600_firmware:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:gms600_firmware:1.3.1.0:*:*:*:*:*:*:*
  • Hitachienergy/Pwc600 Firmware6 versions
    cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:pwc600_firmware:1.1.0.1:*:*:*:*:*:*:*
  • Hitachienergy/Relion 650 Firmware9 versions
    cpe:2.3:o:hitachienergy:relion_650_firmware:1.0.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:hitachienergy:relion_650_firmware:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:2.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.5:*:*:*:*:*:*:*
  • Hitachienergy/Relion 670 Firmware9 versions
    cpe:2.3:o:hitachienergy:relion_670_firmware:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:hitachienergy:relion_670_firmware:*:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.5:*:*:*:*:*:*:*
  • Hitachienergy/Relion Sam600 Io Firmware2 versions
    cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.5:*:*:*:*:*:*:*
  • Hitachi/Relion 670 Seriesllm-create
    Range: 2.0, 2.2.2, 2.2.3 prior to 2.2.3.5
  • Hitachi/Relion 670/650/SAM600-IOllm-create
    Range: 2.2.1, 2.2.5 prior to 2.2.5.2
  • Hitachi/PWC600llm-create
    Range: 1.0.1.4 and prior, 1.1.0.1 and prior
  • Hitachi/Relion 650 Seriesllm-fuzzy2 versions
    2.1, 2.2.0, 2.2.4+ 1 more
    • (no CPE)range: 2.1, 2.2.0, 2.2.4
    • (no CPE)range: 2.0 all revisions
  • Hitachi/GMS600llm-fuzzy2 versions
    1.3.0, 1.3.0.1, 1.2.0+ 1 more
    • (no CPE)range: 1.3.0, 1.3.0.1, 1.2.0
    • (no CPE)range: 1.3.0
  • Hitachi/Relion 670/650llm-fuzzy3 versions
    1.0, 1.1, 1.2, 1.3 prior to 1.3.0.8+ 2 more
    • (no CPE)range: 1.0, 1.1, 1.2, 1.3 prior to 1.3.0.8
    • (no CPE)range: 1.1 all revisions
    • (no CPE)range: 2.2.0 all revisions
  • Hitachi Energy/PWC600v5
    Range: 1.0.1
  • Hitachi/Relion 670/650 and SAM600-IO seriescpe-rescue
    Range: 2.2.1 all revisions

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.