Hitachi Energy Relion 670 650 series and SAM600-IO Product

SUMMARY Hitachi Energy is aware of two critical memory allocation vulnerabilities called BadAlloc 1 vulnerabilities in the WindRiver VxWorks Operating Systems 23 that are used in our product versions listed in this advisory. An attacker that exploits these vulnerabilities might bypass security...

Wind River VxWorks < 7 Build 21.03 DoS

According to its self-reported version, the remote device is Wind River VxWorks 7 and it's affected by a denial of service vulnerability due to a buffer over-read on IKE. An unauthenticated, remote attacer can exploit this, by sending a specially crafted IKE packet, to cause IKE and services...

Wind River VxWorks Resource Management Error Vulnerability

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in VxWorks 6.9 through 7, which stems from a specially designed packet in the IKE component that could result ...

Vulnerability fixed in VxWorks

A vulnerability has been fixed in Wind River VxWorks 6.9 and 7. A malicious party could potentially exploit the vulnerability to cause a Denial-of-Service by sending a specially prepared network packet to the IKE service. Wind River has released updates to fix the vulnerability fix in VxWorks. Fo...

CVE-2021-43268

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

CVE-2021-43268

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

CVE-2021-43268

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

Double free

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

CVE-2021-43268

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

CVE-2021-43268

CVE-2021-43268 affects Wind River VxWorks 6.9 through 7, with a vulnerability in the IKE component where a crafted packet can cause reading beyond the end of a buffer or a double free. Impact is described as potential denial of service via crafted network traffic to the IKE service. Public detail...

PT-2021-23790

Name of the Vulnerable Software and Affected Versions VxWorks versions 6.9 through 7 Description An issue in the IKE component allows a specifically crafted packet to potentially lead to reading beyond the end of a buffer or a double free. Recommendations For VxWorks versions 6.9 through 7,...

CVE-2021-43268: Double Free

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free...

Wind River VxWorks 资源管理错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in VxWorks 6.9 through 7, which stems from a specially designed packet in the IKE component that could result ...

CVE-2021-35535

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

Design/Logic Flaw

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

CVE-2021-35535 Insufficient Security Control Vulnerability

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

CVE-2021-35535: Initialization of a Resource with an Insecure Default

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

Hitachi Energy Relion 670/650/SAM600-IO

1. EXECUTIVE SUMMARY CVSS v3 8.1 Vendor: Hitachi Energy Equipment: Relion 670/650/SAM600-IO Vulnerability: Insecure Default Initialization of Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could hijack existing TCP sessions to inject packets of their choosing or cause...

CVE-2021-35535

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

Wind River VxWorks <= 6.8 RCE

According to its self-reported version, the remote device is Wind River VxWorks and it's affected by a remote code execution vulnerability. An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. Note that Nessus has not tested for this issue...