PT-2025-12795 · Rtu500 · Rtu500

Published 2025-03-25 · Updated 2025-03-25 · CVE-2024-12169

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RTU500 versions up to 13.4.4, 13.5.3, 13.6.1, 13.7.4, 13.7.5

Description A vulnerability exists in the RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality. This issue allows an attacker to restart the affected CMU by performing a specific attack sequence, but only if secure communication using IEC 62351-3 (TLS) is enabled.

Recommendations For RTU500 versions up to 13.4.4, update to a version later than 13.4.4 to resolve the issue. For RTU500 versions up to 13.5.3, update to a version later than 13.5.3 to resolve the issue. For RTU500 versions up to 13.6.1, update to a version later than 13.6.1 to resolve the issue. For RTU500 versions up to 13.7.4, update to a version later than 13.7.4 to resolve the issue. For RTU500 versions up to 13.7.5, update to a version later than 13.7.5 to resolve the issue. As a temporary workaround, consider disabling the secure communication using IEC 62351-3 (TLS) until a patch is available.

Fix

Related Identifiers

CVE-2024-12169

Affected Products

Rtu500

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12169 · Security Note
• https://twitter.com/WolfgangSesin/status/1904540320575983994 · Twitter Post
• https://twitter.com/CveFindCom/status/1904519156931629194 · Twitter Post
• https://t.me/cvetracker/19879 · Telegram Post
• https://twitter.com/CVEnew/status/1904519268647227549 · Twitter Post
• https://t.me/cvedetector/21093 · Telegram Post
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true · Note