PT-2021-20956 · Hitachi Energy · Rtu500 Series Cmu Firmware

Published 2021-11-26 · Updated 2023-05-16 · CVE-2021-35533

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 series CMU Firmware version 12.0.* Hitachi Energy RTU500 series CMU Firmware version 12.2.* Hitachi Energy RTU500 series CMU Firmware version 12.4.*

Description: The issue is related to an Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series. This allows an attacker to cause the receiving RTU500 CMU, with the BCI enabled, to reboot when receiving a specially crafted message. By default, the BCI IEC 60870-5-104 function is disabled.

Recommendations: For Hitachi Energy RTU500 series CMU Firmware version 12.0., consider disabling the BCI IEC 60870-5-104 function until a patch is available. For Hitachi Energy RTU500 series CMU Firmware version 12.2., consider disabling the BCI IEC 60870-5-104 function until a patch is available. For Hitachi Energy RTU500 series CMU Firmware version 12.4.*, consider disabling the BCI IEC 60870-5-104 function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-35533

Affected Products

Rtu500 Series Cmu Firmware

References · 6

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000063&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-35533 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35533 · Vendor Advisory
• https://t.me/cvenotify/48607 · Telegram Post
• https://t.me/cvenotify/50615 · Telegram Post
• https://t.me/cibsecurity/33000 · Telegram Post