CVE-2021-35533 Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series
An attacker can cause a reboot of Hitachi Energy RTU500 CMU devices by sending a specially crafted IEC 60870-5-104 packet when the BCI function is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-35533?
CVE-2021-35533 is a high-severity denial of service vulnerability in Hitachi Energy RTU500 series, published on 26 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted message. By default, BCI IEC 60870-5-104 function is disabled (not configured). This issue affects: Hitachi Energy RTU500 series CMU Firmware version 12.0.* (all versions); CMU Firmware version 12.2.* (all versions); CMU Firmware version 12.4.* (all versions).
Weakness: CWE-20
Which versions are affected by CVE-2021-35533?
It affects 1 product.
Products include Hitachienergy Rtu500 Firmware.
How do I fix CVE-2021-35533?
No fix has been published for CVE-2021-35533 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-35533 being exploited?
There is no known exploitation of CVE-2021-35533 in the wild and no public exploit code.
Other vulnerabilities in Hitachi Energy RTU500 series
Sources
Also known as GHSA-wv2v-prmm-j684.