CVE-2022-2081
published 2024-01-04CVE-2022-2081: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.64%
48.8th percentile
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hitachi_energy | rtu500_series_cmu_firmware | — | — |
| hitachi_energy | rtu500_series_cmu_firmware | 12.0.1.0 – 12.0.13.0 | — |
| hitachi_energy | rtu500_series_cmu_firmware | 12.2.1.0 – 12.2.11.0 | — |
| hitachi_energy | rtu500_series_cmu_firmware | 12.4.1.0 – 12.4.11.0 | — |
| hitachi_energy | rtu500_series_cmu_firmware | 12.6.1.0 – 12.6.7.0 | — |
| hitachi_energy | rtu500_series_cmu_firmware | 12.7.1.0 – 12.7.3.0 | — |
| hitachi_energy | rtu500_series_cmu_firmware | 13.2.1.0 – 13.2.4.0 | — |
| hitachienergy | rtu520_firmware | — | — |
| hitachienergy | rtu520_firmware | 12.0.1 – 12.0.13 | — |
| hitachienergy | rtu520_firmware | 12.2.1 – 12.2.11 | — |
| hitachienergy | rtu520_firmware | 12.4.1 – 12.4.11 | — |
| hitachienergy | rtu520_firmware | 12.6.1 – 12.6.7 | — |
| hitachienergy | rtu520_firmware | 12.7.1 – 12.7.3 | — |
| hitachienergy | rtu520_firmware | 13.2.1 – 13.2.4 | — |
| hitachienergy | rtu530_firmware | — | — |
| hitachienergy | rtu530_firmware | 12.0.1 – 12.0.13 | — |
| hitachienergy | rtu530_firmware | 12.2.1 – 12.2.11 | — |
| hitachienergy | rtu530_firmware | 12.4.1 – 12.4.11 | — |
| hitachienergy | rtu530_firmware | 12.6.1 – 12.6.7 | — |
| hitachienergy | rtu530_firmware | 12.7.1 – 12.7.3 | — |
| hitachienergy | rtu530_firmware | 13.2.1 – 13.2.4 | — |
| hitachienergy | rtu540_firmware | — | — |
| hitachienergy | rtu540_firmware | 12.0.1 – 12.0.13 | — |
| hitachienergy | rtu540_firmware | 12.2.1 – 12.2.11 | — |
| hitachienergy | rtu540_firmware | 12.4.1 – 12.4.11 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v3xr-m742-g2v3: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above
ghsa_unreviewed·2024-01-04
CVE-2022-2081 [HIGH] CWE-120 GHSA-v3xr-m742-g2v3: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.
CISA ICS
Hitachi Energy RTU500
cisa_ics·2022-08-23·CVSS 7.5
[HIGH] Hitachi Energy RTU500
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Hitachi Energy RTU500
Last RevisedAugust 23, 2022
Alert CodeICSA-22-235-07
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Hitachi Energy
- Equipment: RTU500 Series
- Vulnerability: Stack-based Buffer Overflow
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted Modbus TCP packet in a high rate, causing a stack overflow, which could result in a reboot of the product.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Hitachi
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-01-04
Published