CVE-2018-5475
published 2018-02-19CVE-2018-5475: A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer…
PriorityP260critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
3.82%
88.7th percentile
A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ge | d60_line_distance_relay_firmware | <= 7.11 | — |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2018-5475 affects GE D60 Line Distance Relay devices running firmware Version 7.11 and prior; multiple stack-based buffer overflow vulnerabilities enable remote code execution without authentication ↗
- →The vulnerability is remotely exploitable with no authentication and no user interaction required (CVSS vector AV:N/AC:L/PR:N/UI:N), making it detectable via anomalous unauthenticated network traffic to D60 relay devices ↗
- →A separate but related vulnerability (CVE-2018-5473) targets the SSH functions of the D60 device via buffer overflow; monitor for anomalous or malformed SSH traffic to D60 devices as a detection vector ↗
- ·No known public exploits specifically target these vulnerabilities at time of advisory publication ↗
- ·Affected scope is limited to GE D60 Line Distance Relay devices on firmware Version 7.11 and prior; devices updated to the patched firmware are not affected ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fh7v-9jr9-jgjx: A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7
ghsa_unreviewed·2022-05-13
CVE-2018-5475 [CRITICAL] CWE-787 GHSA-fh7v-9jr9-jgjx: A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7
A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution.
CISA ICS
GE D60 Line Distance Relay
cisa_ics·2018-02-15
GE D60 Line Distance Relay
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
GE D60 Line Distance Relay
Last RevisedFebruary 15, 2018
Alert CodeICSA-18-046-02
## CVSS v3 9.8
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: GE
Equipment: D60 Line Distance Relay
Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer
## AFFECTED PRODUCTS
The following versions of the D60 Line Distance Relay are affected:
- D60 devices running firmware Version 7.11 and prior.
## IMPACT
Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary co
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-02-19
Published