VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2023· Updated Mar 5, 2025

CVE-2022-4608

CVE-2022-4608

Description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected products

2
  • Hitachi/RTU500 seriesllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: RTU500 series CMU Firmware version 13.3.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.