High severity · published Dec 19, 2023
CVE-2023-6711
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
RTU500 series CMU Firmware · Hitachi Energy
12.0.1 through 12.0.14; 12.2.1 through 12.2.11; 12.4.1 through 12.4.11; 12.6.1 through 12.6.9; 12.7.1 through 12.7.6; 13.2.1 through 13.2.6; +2 more · source: vendor
RF
Rtu500 Firmware · Hitachienergy
12.0.1.0 before 12.0.15.0; 12.2.1.0 before 12.2.12.0; 12.4.1.0 before 12.4.12.0; 12.6.1.0 before 12.6.10.0; 12.7.1.0 before 12.7.7.0; 13.2.1.0 before 13.2.7.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6711
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6711
Vendor Advisory
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184&languageCode=en&Preview=true
More from RTU500 series CMU Firmware
9.1
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite…
9.1
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary…
8.2
CVE-2024-1531
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below
7.5
CVE-2026-1773
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality…
7.5
CVE-2022-2081
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above