Lucene search

[email protected]CVE-2022-2081

HistoryJan 04, 2024 - 10:15 a.m.

CVE-2022-2081

2024-01-0410:15:10

CWE-120

CWE-787

[email protected]

web.nvd.nist.gov

vulnerability

hci modbus tcp

rtu500 cmu

flood control

stack overflow

cve-2022-2081

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%

JSON

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.

Affected configurations

NVD

Node

hitachienergyrtu520_firmwareRange12.0.1–12.0.13

hitachienergyrtu520_firmwareRange12.2.1–12.2.11

hitachienergyrtu520_firmwareRange12.4.1–12.4.11

hitachienergyrtu520_firmwareRange12.6.1–12.6.7

hitachienergyrtu520_firmwareRange12.7.1–12.7.3

hitachienergyrtu520_firmwareRange13.2.1–13.2.4

hitachienergyrtu520_firmwareMatch13.3.1

AND

hitachienergyrtu520Match-

Node

hitachienergyrtu530_firmwareRange12.0.1–12.0.13

hitachienergyrtu530_firmwareRange12.2.1–12.2.11

hitachienergyrtu530_firmwareRange12.4.1–12.4.11

hitachienergyrtu530_firmwareRange12.6.1–12.6.7

hitachienergyrtu530_firmwareRange12.7.1–12.7.3

hitachienergyrtu530_firmwareRange13.2.1–13.2.4

hitachienergyrtu530_firmwareMatch13.3.1

AND

hitachienergyrtu530Match-

Node

hitachienergyrtu540_firmwareRange12.0.1–12.0.13

hitachienergyrtu540_firmwareRange12.2.1–12.2.11

hitachienergyrtu540_firmwareRange12.4.1–12.4.11

hitachienergyrtu540_firmwareRange12.6.1–12.6.7

hitachienergyrtu540_firmwareRange12.7.1–12.7.3

hitachienergyrtu540_firmwareRange13.2.1–13.2.4

hitachienergyrtu540_firmwareMatch13.3.1

AND

hitachienergyrtu540Match-

Node

hitachienergyrtu560_firmwareRange12.0.1–12.0.13

hitachienergyrtu560_firmwareRange12.2.1–12.2.11

hitachienergyrtu560_firmwareRange12.4.1–12.4.11

hitachienergyrtu560_firmwareRange12.6.1–12.6.7

hitachienergyrtu560_firmwareRange12.7.1–12.7.3

hitachienergyrtu560_firmwareRange13.2.1–13.2.4

hitachienergyrtu560_firmwareMatch13.3.1

AND

hitachienergyrtu560Match-

CPENameOperatorVersion
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele12.0.13
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele12.2.11
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele12.4.11
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele12.6.7
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele12.7.3
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwarele13.2.4
hitachienergy:rtu520_firmwarehitachienergy rtu520 firmwareeq13.3.1

CPE	Name	Operator	Version
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	12.0.13
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	12.2.11
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	12.4.11
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	12.6.7
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	12.7.3
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	le	13.2.4
hitachienergy:rtu520_firmware	hitachienergy rtu520 firmware	eq	13.3.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "RTU500 series CMU firmware",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "12.0.13.0",
        "status": "affected",
        "version": "12.0.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "12.2.11.0",
        "status": "affected",
        "version": "12.2.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "12.4.11.0",
        "status": "affected",
        "version": "12.4.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "12.6.7.0",
        "status": "affected",
        "version": "12.6.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "12.7.3.0",
        "status": "affected",
        "version": "12.7.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "13.2.4.0",
        "status": "affected",
        "version": "13.2.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "13.3.1.0"
      }
    ]
  }
]