Input validation

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured...

CVE-2023-4518

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured...

CVE-2023-4518

Hitachi Energy Relion 670/650/SAM600-IO series are affected by CVE-2023-4518 due to improper validation of GOOSE input; out-of-range values received by the IED can cause a device reboot when goose receiving blocks are configured. The vulnerability targets the GOOSE message handling, with impact o...

PT-2023-29447 · Hitachi Energy · Relion670 +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists in the input validation of the GOOSE messages. When out of range values are received and processed by the IED, it causes a reboot...

Hitachi Energy SAM600 Security Vulnerability

Hitachi Energy SAM600 is Hitachi Energy's substation automation, protection and control system. A security vulnerability exists in Hitachi Energy SAM600, which originates from a security flaw in the input validation of GOOSE. Affected products and versions: Hitachi Energy Relion 670 series versio...

CISA Develops Factsheet for Free Tools for Cloud Environments

CISA has developed and published a factsheet, Free Tools for Cloud Environments, to help businesses transitioning into a cloud environment identify proper tools and techniques necessary for the protection of critical assets and data security. Free Tools for Cloud Environments provides network...

Fedora: Security Advisory for golang-github-rubenv-sql-migrate (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-pressly-goose (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-rubenv-sql-migrate-0-0.6.20210529gita32ed26.fc36

sql-migrate is a SQL Schema migration tool for Go, based on gorp and goose...

[SECURITY] Fedora 36 Update: golang-github-pressly-goose-2.7.0-5.fc36

Goose database migration tool - fork of https://bitbucket.org/liamstask/goose...

Fedora: Security Advisory for golang-github-pressly-goose (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-rubenv-sql-migrate-0-0.4.20210529gita32ed26.fc35

sql-migrate is a SQL Schema migration tool for Go, based on gorp and goose...

[SECURITY] Fedora 35 Update: golang-github-pressly-goose-2.7.0-4.fc35

Goose database migration tool - fork of https://bitbucket.org/liamstask/goose...

Fedora: Security Advisory for golang-github-pressly-goose (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-rubenv-sql-migrate-0-0.4.20210529gita32ed26.fc36

sql-migrate is a SQL Schema migration tool for Go, based on gorp and goose...

[SECURITY] Fedora 36 Update: golang-github-pressly-goose-2.7.0-4.fc36

Goose database migration tool - fork of https://bitbucket.org/liamstask/goose...

CVE-2022-1302

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

CVE-2022-1302

CVE-2022-1302 affects MZ Automation LibIEC61850 versions prior to 1.5.1. An unauthenticated attacker can craft a GOOSE message to cause a denial of service. Remediation: upgrade to LibIEC61850 1.5.1 or newer; as a temporary measure, restrict access to the affected service.

CVE-2022-1302 Malformed Goose Message in LibIEC61850 may result in a denial of service

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

Mz Automation Libiec61850 输入验证错误漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. An input validation error vulnerability exists in Mz Automation Libiec61850 prior to 1.5.1, where an unauthenticated attacker could craft a goose message to cause a denial of service...