CVE-2021-35533: Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series
Hitachi Energy · RTU500 series
Vendor fix available · Affected: Hitachi Energy RTU500 series · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 61% of scored CVEs
DescriptionCVE.org
Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted message. By default, BCI IEC 60870-5-104 function is disabled (not configured). This issue affects: Hitachi Energy RTU500 series CMU Firmware version 12.0.* (all versions); CMU Firmware version 12.2.* (all versions); CMU Firmware version 12.4.* (all versions).
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Hitachi Energy · RTU500 seriesfrom CMU Firmware version 12.0 up to and including 12.0.*; from CMU Firmware version 12.2 up to and including 12.2.*; from CMU Firmware version 12.4 up to and including 12.4.*
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Hitachi Energy
- Published
- November 2021
CoverageNo articles yet
No CyberSIXT article names CVE-2021-35533 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.