Insufficient Security Control Vulnerability
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.2.3.5, 2.2.5.2, 1.3.0.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product. This issue affects: Hitachi Energy Relion 670 Series 2.0 all revisions; 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.5. Hitachi Energy Relion 670/650 Series 2.1 all revisions. 2.2.0 all revisions; 2.2.4 all revisions; Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions; 2.2.5 versions prior to 2.2.5.2. Hitachi Energy Relion 650 1.0 all revisions. 1.1 all revisions; 1.2 all revisions; 1.3 versions prior to 1.3.0.8; Hitachi Energy GMS600 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 1.0.1 version 1.0.1.4 and prior versions; 1.1.0 version 1.1.0.1 and prior versions.
Timeline
- CVE published
- Record last updated
Affected versions
- Hitachi Energy Relion 670 Series
From 2.2.3 · fixed in 2.2.3.5
- Hitachi Energy Relion 670/650 Series
2.2.0 all revisions, 2.2.4 all revisions, 2.1 all revisions
- Hitachi Energy Relion 670/650/SAM600-IO
From 2.2.5 · fixed in 2.2.5.2
- Hitachi Energy Relion 650
From 1.3 · fixed in 1.3.0.8
- Hitachi Energy GMS600
1.3.0, 1.3.1.0 1.3.0.1, 1.2.0
- Hitachi Energy PWC600
From 1.0.1 · through 1.0.1.4; From 1.1.0 · through 1.1.0.1