CVE-2019-18247 Denial of service in Relion 650 and 670 Series
An attacker can force a reboot of Relion 650 and 670 series devices via a crafted message, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18247?
CVE-2019-18247 is a high-severity denial of service vulnerability in Relion 650 and 670 Series, published on 27 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of service.
Weakness: CWE-20
Which versions are affected by CVE-2019-18247?
It affects 2 products.
Products include Hitachienergy Relion 650 Firmware, Hitachienergy Relion 670 Firmware.
How do I fix CVE-2019-18247?
No fix has been published for CVE-2019-18247 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-18247 being exploited?
There is no known exploitation of CVE-2019-18247 in the wild and no public exploit code.
Other vulnerabilities in Relion 650 and 670 Series
Sources
Also known as GHSA-gr3p-h56x-rc2c.