CVE-2022-3353 : A vulnerability exists in the IEC 61850 communication stack that affects multipl

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections. Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*

Published 2023-02-21 14:15:13

Updated 2023-04-19 15:40:55

Source Hitachi Energy

View at NVD, CVE.org

Products affected by CVE-2022-3353

Hitachienergy » Sys600 Firmware
Versions from including (>=) 10.1 and up to, including, (<=) 10.3.1
cpe:2.3:o:hitachienergy:sys600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Sys600 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 13.3.1 and up to, including, (<=) 13.3.3
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 13.2.1.0 and up to, including, (<=) 13.2.5.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 12.6.1.0 and up to, including, (<=) 12.6.8.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 12.4.1.0 and up to, including, (<=) 12.4.11.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 12.0.1.0 and up to, including, (<=) 12.0.14.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 12.7.1.0 and up to, including, (<=) 12.7.4.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware
Versions from including (>=) 12.2.1.0 and up to, including, (<=) 12.2.11.0
cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Rtu500 Firmware » Version: 13.4.1
cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu500 » Version: N/A
Hitachienergy » Reb500 Firmware
Versions from including (>=) 7.0 and before (<) 8.3.3
cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Reb500 » Version: N/A
Hitachienergy » Pwc600 Firmware » Version: 1.0
cpe:2.3:o:hitachienergy:pwc600_firmware:1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Pwc600 » Version: N/A
Hitachienergy » Pwc600 Firmware » Version: 1.1
cpe:2.3:o:hitachienergy:pwc600_firmware:1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Pwc600 » Version: N/A
Hitachienergy » Pwc600 Firmware » Version: 1.2
cpe:2.3:o:hitachienergy:pwc600_firmware:1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Pwc600 » Version: N/A
Hitachienergy » Modular Switchgear Monitoring Firmware
Versions up to, including, (<=) 2.2.3
cpe:2.3:o:hitachienergy:modular_switchgear_monitoring_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Modular Switchgear Monitoring » Version: N/A
Hitachienergy » Relion Sam600-io Firmware » Version: 2.2.1
cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion Sam600-io » Version: N/A
Hitachienergy » Relion Sam600-io Firmware » Version: 2.2.5
cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.5:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion Sam600-io » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 1.1
cpe:2.3:o:hitachienergy:relion_650_firmware:1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 1.3
cpe:2.3:o:hitachienergy:relion_650_firmware:1.3:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.1
cpe:2.3:o:hitachienergy:relion_650_firmware:2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.0
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.1
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.2
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.2:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.3
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.3:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.4
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 650 Firmware » Version: 2.2.5
cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.5:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 650 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 1.2
cpe:2.3:o:hitachienergy:relion_670_firmware:1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.0
cpe:2.3:o:hitachienergy:relion_670_firmware:2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.1
cpe:2.3:o:hitachienergy:relion_670_firmware:2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.0
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.1
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.2
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.3
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.3:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.4
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Relion 670 Firmware » Version: 2.2.5
cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.5:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Relion 670 » Version: N/A
Hitachienergy » Gms600 Firmware » Version: 1.3.0
cpe:2.3:o:hitachienergy:gms600_firmware:1.3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Gms600 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R1b02
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1b02:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R1c07
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1c07:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R1d02
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1d02:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R1e01
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1e01:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R2b16
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R2b16 03
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16_03:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Fox615 Tego1 Firmware » Version: R15b08
cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r15b08:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Fox615 Tego1 » Version: N/A
Hitachienergy » Txpert Hub Coretec 4 Firmware
Versions from including (>=) 2.0.0 and up to, including, (<=) 3.0.0
cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Txpert Hub Coretec 4 » Version: N/A
Hitachienergy » Txpert Hub Coretec 5 Firmware » Version: 3.0.0
cpe:2.3:o:hitachienergy:txpert_hub_coretec_5_firmware:3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Txpert Hub Coretec 5 » Version: N/A
Hitachienergy » Itt600 Sa Explorer » Version: 1.1.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.1.1
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.1:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.1.2
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.2:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.5.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.5.1
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.1:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.6.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.6.0.1
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.7.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.7.2
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 1.8.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.1
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.1:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.2
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.2:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.3
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.3:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.4.1
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.4.1:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.5.0
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.0:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.0.5.4
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.4:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.1.0.4
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:*
Matching versions
Hitachienergy » Itt600 Sa Explorer » Version: 2.1.0.5
cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-3353

EPSS FAQ

0.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-3353

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	Hitachi Energy
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-3353

CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.
Assigned by:
- cybersecurity@hitachienergy.com (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2022-3353

Jump to

Vulnerability Details : CVE-2022-3353

Products affected by CVE-2022-3353

Exploit prediction scoring system (EPSS) score for CVE-2022-3353

CVSS scores for CVE-2022-3353

CWE ids for CVE-2022-3353

References for CVE-2022-3353