2 lines
10 KiB
JSON
2 lines
10 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"RTU500 series CMU firmware","vendor":"Hitachi Energy","versions":[{"lessThanOrEqual":"12.0.13.0","status":"affected","version":"12.0.1.0","versionType":"custom"},{"lessThanOrEqual":"12.2.11.0","status":"affected","version":"12.2.1.0","versionType":"custom"},{"lessThanOrEqual":"12.4.11.0","status":"affected","version":"12.4.1.0","versionType":"custom"},{"lessThanOrEqual":"12.6.7.0","status":"affected","version":"12.6.1.0","versionType":"custom"},{"lessThanOrEqual":"12.7.3.0","status":"affected","version":"12.7.1.0","versionType":"custom"},{"lessThanOrEqual":"13.2.4.0","status":"affected","version":"13.2.1.0","versionType":"custom"},{"status":"affected","version":"13.3.1.0"}]}],"source":"cybersecurity@hitachienergy.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F5E23735-DB56-4C1E-8389-B06018CC4D9E","versionEndIncluding":"12.0.13","versionStartIncluding":"12.0.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2469A78A-6F37-4F4B-BED8-060914B2D0A4","versionEndIncluding":"12.2.11","versionStartIncluding":"12.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E9E6934B-EBB2-45FB-8E4A-7D360CBA0F92","versionEndIncluding":"12.4.11","versionStartIncluding":"12.4.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A8966632-8645-43D6-AB52-8BC1C1BDB6DD","versionEndIncluding":"12.6.7","versionStartIncluding":"12.6.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F12F1A20-9D3C-4F2B-B538-8B4EABD288C9","versionEndIncluding":"12.7.3","versionStartIncluding":"12.7.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A0F9D4-E9ED-4351-8909-EEE689DE2BF4","versionEndIncluding":"13.2.4","versionStartIncluding":"13.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu520_firmware:13.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1621CAF4-C18A-48B5-82AC-F8D09105656A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hitachienergy:rtu520:-:*:*:*:*:*:*:*","matchCriteriaId":"11AF93AD-200F-47A6-BA2C-F82165AFB50D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BB001482-F203-4731-A6DD-6BCE3C1338CA","versionEndIncluding":"12.0.13","versionStartIncluding":"12.0.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"79BC5D4A-09B2-41FB-962A-CF580181EB2C","versionEndIncluding":"12.2.11","versionStartIncluding":"12.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A30CDB2F-E0CC-4440-9E59-AB339F94996F","versionEndIncluding":"12.4.11","versionStartIncluding":"12.4.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"56598D9D-5BCB-42C6-8705-AB79C4BD2A9A","versionEndIncluding":"12.6.7","versionStartIncluding":"12.6.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B4FDE92C-733F-4B52-8BE6-E37898B39075","versionEndIncluding":"12.7.3","versionStartIncluding":"12.7.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2209D1D9-94CD-4D8B-BB80-39CC129FEEF4","versionEndIncluding":"13.2.4","versionStartIncluding":"13.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu530_firmware:13.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BACEC63E-0548-483F-813E-C04F4C95970E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hitachienergy:rtu530:-:*:*:*:*:*:*:*","matchCriteriaId":"FC6F9377-E6BB-4DEA-9D87-0AF792CBAC57","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8F1F7579-050B-4216-A4D5-FD74C8A19618","versionEndIncluding":"12.0.13","versionStartIncluding":"12.0.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"803838B5-058E-436B-8CE5-BF711456F96B","versionEndIncluding":"12.2.11","versionStartIncluding":"12.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A0361A98-1496-4763-A489-DCAE0D0DF613","versionEndIncluding":"12.4.11","versionStartIncluding":"12.4.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"762AB8CE-068D-46D4-A275-154A2AC58E55","versionEndIncluding":"12.6.7","versionStartIncluding":"12.6.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4DF9263A-D1DB-4899-99C2-88B59847C808","versionEndIncluding":"12.7.3","versionStartIncluding":"12.7.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"15B3C46C-0A5E-4142-A096-94A513DD8004","versionEndIncluding":"13.2.4","versionStartIncluding":"13.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu540_firmware:13.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E8B2A709-9538-47C9-9E70-DBC1D2817E79","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hitachienergy:rtu540:-:*:*:*:*:*:*:*","matchCriteriaId":"6EEFDEF0-883D-402B-9CD4-333A145E3C75","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0708BD2D-FEA4-4C97-9C3A-B4E67EA3D926","versionEndIncluding":"12.0.13","versionStartIncluding":"12.0.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6BDB5A36-9B2F-43F9-A81B-506C4660151F","versionEndIncluding":"12.2.11","versionStartIncluding":"12.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F25FBFD5-BC45-49C9-87D4-A9C05405490D","versionEndIncluding":"12.4.11","versionStartIncluding":"12.4.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0505DF4D-0B06-4E61-B756-C2B5D31B85A0","versionEndIncluding":"12.6.7","versionStartIncluding":"12.6.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9495E9A9-733C-4073-8B39-1A08A88B05A7","versionEndIncluding":"12.7.3","versionStartIncluding":"12.7.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"269F1D56-A575-487D-B5ED-4E774C26BA3B","versionEndIncluding":"13.2.4","versionStartIncluding":"13.2.1","vulnerable":true},{"criteria":"cpe:2.3:o:hitachienergy:rtu560_firmware:13.3.1:*:*:*:*:*:*:*","matchCriteriaId":"530437F6-6F90-45D5-821C-B87C292C0CCC","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:hitachienergy:rtu560:-:*:*:*:*:*:*:*","matchCriteriaId":"495DCBD6-D2D1-4295-81D1-6ACA1B2CA223","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function."},{"lang":"es","value":"Existe una vulnerabilidad en la función HCI Modbus TCP incluida en las versiones de producto enumeradas anteriormente. Si HCI Modbus TCP está habilitado y configurado, un atacante podría aprovechar la vulnerabilidad enviando un mensaje especialmente manipulado a la RTU500 a alta velocidad, lo que provocaría que la CMU RTU500 objetivo se reiniciara. La vulnerabilidad se debe a una falta de control de inundaciones que eventualmente, si se explota, provoca un desbordamiento de pila interna en la función HCI Modbus TCP."}],"id":"CVE-2022-2081","lastModified":"2026-06-17T04:41:14.917","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-2081","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-01-04T17:17:18.805708Z","version":"2.0.3"}}]},"published":"2024-01-04T10:15:10.927","references":[{"source":"cybersecurity@hitachienergy.com","tags":["Vendor Advisory"],"url":"https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@hitachienergy.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}
|