Medium severity · published Dec 4, 2023
CVE-2023-5768
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below
6.1
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.
Incomplete or wrong received APDU frame layout may
cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer
with wrong length information of APDU or delayed reception
of data octets.
Only communication link of affected HCI IEC 60870-5-104
is blocked. If attack sequence stops the communication to
the previously attacked link gets normal again.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
RTU500 series · Hitachi Energy
RTU500 series CMU Firmware version 12.0.1 – 12.0.14; RTU500 series CMU Firmware version 12.2.1 – 12.2.11; RTU500 series CMU Firmware version 12.4.1 – 12.4.11 ; RTU500 series CMU Firmware version 12.6.1 – 12.6.9 ; RTU500 series CMU Firmware version 12.7.1 – 12.7.6; RTU500 series CMU Firmware version 13.2.1 – 13.2.6 ; +1 more · source: vendor
RF
Rtu520 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu530 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu540 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
RF
Rtu560 Firmware · Hitachienergy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-5768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-5768
Vendor Advisory
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=true
More from RTU500 series
7.5
CVE-2022-4608
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product
7.5
CVE-2022-2502
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product