title: Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series
description: Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted message. By default, BCI IEC 60870-5-104 function is disabled (not configured). This issue affects: Hitachi Energy RTU500 series CMU Firmware version 12.0.* (all versions); CMU Firmware version 12.2.* (all versions); CMU Firmware version 12.4.* (all versions).
problem types: CWE-20 Improper Input Validation
affected:
{
product: RTU500 series
vendor: Hitachi Energy
versions:
lessThanOrEqual: 12.0.*, status: affected, version: CMU Firmware version 12.0, versionType: custom
lessThanOrEqual: 12.2.*, status: affected, version: CMU Firmware version 12.2, versionType: custom
lessThanOrEqual: 12.4.*, status: affected, version: CMU Firmware version 12.4, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
solutions: - Disable BCI IEC 60870-5-104 function by configuration if it is not used.
- Update to RTU500 series CMU Firmware version 12.6.5.0 or later (e.g., RTU500 CMU Firmware version 12.7.* or CMU Firmware version 13.2.* or later).