description: A vulnerability exists in the input validation of the GOOSE
messages where out of range values received and processed
by the IED caused a reboot of the device. In order for an
attacker to exploit the vulnerability, goose receiving blocks need
to be configured.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: affected
product: Relion670
vendor: Hitachi Energy
versions:
status: affected, version:  Relion 670 series version 2.2.0 all revisions
status: affected, version: Relion 670/650/SAM600-IO series version 2.2.1 all revisions
status: affected, version: elion 670 series version 2.2.2 all revisions
status: affected, version: Relion 670 series version 2.2.3 all revisions
status: affected, version: Relion 670/650 series version 2.2.4 all revisions
status: affected, version: Relion 670/650/SAM600-IO series version 2.2.5 all revisions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL