VYPR
← All advisories
High severity7.5NVD Advisory· Published Jul 26, 2023· Updated Jun 17, 2026

CVE-2022-4608

CVE-2022-4608

Description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Affected products

6
  • Hitachienergy/Rtu500 Firmware4 versions
    cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.2:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:rtu500_firmware:13.3.3:*:*:*:*:*:*:*
    • cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1:*:*:*:*:*:*:*
  • Hitachi/RTU500 seriesllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: RTU500 series CMU Firmware version 13.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.