CVE-2022-4608

CVSS V2 None CVSS V3 None

Description

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.

Overview

CVE ID
CVE-2022-4608

Assigner
Hitachi Energy

Vulnerability Status
PUBLISHED

Published Version
2023-07-26T05:26:42.720Z

Last Modified Date
2023-07-26T05:26:42.720Z

Weakness Enumerations

CWE	URL
CWE-120	http://cwe.mitre.org/data/definitions/120.html

References

Reference URL	Reference Tags
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-4608
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4608

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 16:40:15				Added to TrackCVE