CVE-2025-2403 Denial of service in Relion 670/650 and SAM600-IO
Attackers can cause critical communication module malfunctions in Hitachi Energy Relion and SAM600-IO devices via improper network traffic prioritization.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2403?
CVE-2025-2403 is a high-severity denial of service vulnerability in Hitachi Energy Relion 670/650 and SAM600-IO, published on 24 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM (Line Distance Communication Module) to malfunction.
Weakness: CWE-770
Which versions are affected by CVE-2025-2403?
How do I fix CVE-2025-2403?
No fix has been published for CVE-2025-2403 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-2403 being exploited?
There is no known exploitation of CVE-2025-2403 in the wild and no public exploit code.
Sources
Also known as GHSA-h6m2-5c7m-x9f8.