CVE-2025-2403

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...

Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A)

SUMMARY Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to reboot due to improper disk...

CVE-2025-2403

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...

CVE-2025-2403

The CVE-2025-2403 vulnerability affects Hitachi Energy Relion 670/650 and SAM600-IO series devices, caused by improper prioritization of network traffic over protection mechanisms. This can lead to a denial-of-service that potentially disrupts critical functions such as the Line Distance Communic...

CVE-2025-2403

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...

CVE-2025-2403

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...

CVE-2025-1718

The CVE affects Hitachi Relion 670/650 and SAM600-IO series IED devices. Affected component is the device firmware handling disk space management; an authenticated user with FTP/file-access privileges can trigger a reboot due to improper disk space management. Impact, per sources, is device reboo...

PT-2025-26713 · Sam600-Io +1 · Sam600-Io +1

Name of the Vulnerable Software and Affected Versions: Relion 670/650 and SAM600-IO series devices affected versions not specified Description: The issue allows an authenticated user with file access privilege via FTP access to cause the device to reboot due to improper disk space management...

PT-2025-26714 · Sam600-Io +1 · Sam600-Io +1

Name of the Vulnerable Software and Affected Versions: Relion 670/650 and SAM600-IO series device affected versions not specified Description: A denial-of-service issue exists due to improper prioritization of network traffic over protection mechanisms. This could cause critical functions, such a...

CVE-2025-2403: Allocation of Resources Without Limits or Throttling

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...

CVE-2025-1718: Improper Check for Unusual or Exceptional Conditions

An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space management...

Hitachi Relion security vulnerabilities

Hitachi Relion is used by Hitachi, Ltd. of Japan to protect, control, measure, and monitor for power systems. A security vulnerability exists in Hitachi Relion that stems from improper disk space management and may cause the device to reboot. The following models are affected: 670, 650 and...

Hitachi Relion’s various products have security vulnerabilities

Hitachi Relion 650, among others, is a software for protection, control, measurement and monitoring of power distribution and transmission grids from Hitachi, Japan. A security vulnerability exists in various Hitachi Relion products, which stems from improper prioritization of network traffic and...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on June 5, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-155-01 CyberData 011209 SIP Emergency Intercom ICSA-25-155-02 Hitachi Energy Relion 670,...

CVE-2022-3864

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and...

CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on March 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-065-01 Hitachi Energy PCU400 ICSA-25-065-02 Hitachi Energy Relion 670/650/SAM600-IO...

ABB’s various products have vulnerabilities related to data falsification.

ABB Relion Protection Relays and others are products of ABB Switzerland.ABB Relion Protection Relays are a compact, multifunctional solution for utility and industrial power distribution systems.ABB REX610 is a flexibly configurable all-in-one protection relay.ABB REX615 is ABB REX615 is a flexib...

relion-yolo-it (0.1.3) potentially affected by CVE-2023-33976 via tensorflow-gpu (1.10.1)

tensorflow-gpu PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - relion-yolo-it 0.1.3 Source cves: CVE-2023-33976 Source advisory: OSV:GHSA-GJH7-XX4R-X345...

Hitachi Energy Relion 670, 650 and SAM600-IO Series Insufficient Verification of Data Authenticity (CVE-2022-3864)

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and...