CVE-2023-5768 : A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length information of APDU or delayed reception of data octets. Only communication link of affected HCI IEC 60870-5-104 is blocked. If attack sequence stops the communication to the previously attacked link gets normal again.

Published 2023-12-04 15:15:08

Updated 2023-12-07 21:02:40

Source Hitachi Energy

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2023-5768

Hitachienergy » Rtu520 Firmware
Versions from including (>=) 12.2.1 and up to, including, (<=) 12.2.11
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 12.4.1 and up to, including, (<=) 12.4.11
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 13.4.1 and up to, including, (<=) 13.4.3
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 12.7.1 and up to, including, (<=) 12.7.6
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 13.2.1 and up to, including, (<=) 13.2.6
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 12.0.1 and up to, including, (<=) 12.0.14
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu520 Firmware
Versions from including (>=) 12.6.1 and up to, including, (<=) 12.6.9
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu520 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 12.6.1 and up to, including, (<=) 12.6.9
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 12.0.1 and up to, including, (<=) 12.0.14
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 12.4.1 and up to, including, (<=) 12.4.11
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 12.2.1 and up to, including, (<=) 12.2.11
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 13.4.1 and up to, including, (<=) 13.4.3
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 13.2.1 and up to, including, (<=) 13.2.6
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu530 Firmware
Versions from including (>=) 12.7.1 and up to, including, (<=) 12.7.6
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu530 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 12.6.1 and up to, including, (<=) 12.6.9
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 12.2.1 and up to, including, (<=) 12.2.11
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 13.2.1 and up to, including, (<=) 13.2.6
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 13.4.1 and up to, including, (<=) 13.4.3
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 12.4.1 and up to, including, (<=) 12.4.11
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 12.7.1 and up to, including, (<=) 12.7.6
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu540 Firmware
Versions from including (>=) 12.0.1 and up to, including, (<=) 12.0.14
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu540 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 13.4.1 and up to, including, (<=) 13.4.3
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 12.4.1 and up to, including, (<=) 12.4.11
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 13.2.1 and up to, including, (<=) 13.2.6
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 12.7.1 and up to, including, (<=) 12.7.6
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 12.0.1 and up to, including, (<=) 12.0.14
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 12.2.1 and up to, including, (<=) 12.2.11
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A
Hitachienergy » Rtu560 Firmware
Versions from including (>=) 12.6.1 and up to, including, (<=) 12.6.9
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hitachienergy » Rtu560 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-5768

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-5768

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	Hitachi Energy
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2023-5768

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-5768

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=true

Hitachi Energy Publisher
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-5768

Products affected by CVE-2023-5768

Exploit prediction scoring system (EPSS) score for CVE-2023-5768

CVSS scores for CVE-2023-5768

CWE ids for CVE-2023-5768

References for CVE-2023-5768