Hitachi Energy's RTU500 Series Product (UPDATE B)

🗓️ 05 May 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 43 Views

Hitachi Energy RTU500 Series Product (Update B) Security Vulnerabilities

Reporter	Title	Published	Views	Family All 2264
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client (CVE-2022-0778)	29 Jun 202219:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities	7 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payments is vulnerable to OpenSSL Denial of Sevice Attack (CVE-2022-0778)	25 Apr 202307:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2021-3712) affects Power HMC	30 May 202207:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286]	19 Jun 202508:13	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2022-0778	12 May 202215:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2021-3711	15 Nov 202102:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Rational ClearCase (CVE-2022-1292, CVE-2022-0778)	25 Jul 202214:51	–	ibm

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-143-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-143-02
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

05 May 2023 06:00Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.17.5 - 9.8

EPSS0.88334

SSVC

hitachi energy rtu500 series type confusion observable timing discrepancy out-of-bounds read infinite loop cve-2023-0286 cve-2022-4304 cve-2022-23937 cve-2022-0778 cvss v3 9.8 exploitable remotely denial-of-service condition x.400 address processing openssl rsa decryption wind river vxworks rtu500 series product versions bn_mod_sqrt