cvelistv5 - cve-2023-1514

CVE-2023-1514 (GCVE-0-2023-1514)

Vulnerability from cvelistv5 – Published: 2023-12-19 14:22 – Updated: 2024-08-02 05:49

Summary

A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-295 - Improper Certificate Validation

Assigner

Hitachi Energy

References

URL

	Vendor	Product	Version
	Hitachi Energy	RTU500 Scripting Interface	Affected: 1.0.1.30 Affected: 1.0.2 Affected: 1.1.1

FKIE_CVE-2023-1514

Vulnerability from fkie_nvd - Published: 2023-12-19 15:15 - Updated: 2024-11-21 07:39

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Summary

References

	URL	Tags
	cybersecurity@hitachienergy.com	https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152&languageCode=en&Preview=true	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152&languageCode=en&Preview=true	Vendor Advisory

Impacted products

Vendor	Product	Version
hitachienergy	rtu500_scripting_interface	1.0.1.30
hitachienergy	rtu500_scripting_interface	1.0.2
hitachienergy	rtu500_scripting_interface	1.1.1

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.1.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E327A74-D44E-4AAF-B191-C9F8A8F4FB34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C34DFD88-6B0D-4683-8D23-808C6D251D82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EF5BA03-60D1-4A72-AE7A-82D3F1286446",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad en RTU500 Scripting interface. Cuando un cliente se conecta a un servidor mediante TLS, el servidor presenta un certificado. Este certificado vincula una clave p\u00fablica a la identidad del servicio y est\u00e1 firmado por Certification Authority (CA), lo que permite al cliente validar que se puede confiar en el servicio remoto y que no es malicioso. Si el cliente no valida los par\u00e1metros del certificado, los atacantes podr\u00edan falsificar la identidad del servicio. Un atacante podr\u00eda aprovechar la vulnerabilidad falsificando la identidad de un dispositivo RTU500 e interceptando los mensajes iniciados a trav\u00e9s de RTU500 Scripting interface."
    }
  ],
  "id": "CVE-2023-1514",
  "lastModified": "2024-11-21T07:39:20.810",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.2,
        "source": "cybersecurity@hitachienergy.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-12-19T15:15:08.037",
  "references": [
    {
      "source": "cybersecurity@hitachienergy.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
    }
  ],
  "sourceIdentifier": "cybersecurity@hitachienergy.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ],
      "source": "cybersecurity@hitachienergy.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

ICSA-24-331-05

Vulnerability from csaf_cisa - Published: 2023-12-19 13:30 - Updated: 2023-12-19 13:30

Summary

Hitachi Energy RTU500 Scripting Interface

Notes

Summary

Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.

Notice

The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.

General Mitigation Factors/Workarounds

Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.

Support

For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.

Legal Notice

All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Advisory Conversion Disclaimer

This CISA CSAF advisory was converted from Hitachi Energy PSIRT's CSAF advisory.

Critical infrastructure sectors

Energy, Water and Wastewater Systems

Countries/areas deployed

Worldwide

Company headquarters location

Switzerland

Recommended Practices

CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.

Recommended Practices

Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.

Recommended Practices

Locate control system networks and remote devices behind firewalls and isolate them from business networks.

Recommended Practices

When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.

Recommended Practices

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Hitachi Energy",
        "summary": "reporting this vulnerability to CISA."
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/specification-document",
      "text": "HIGH"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key\nto the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
        "title": "Summary"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.",
        "title": "Notice"
      },
      {
        "category": "general",
        "text": "Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.",
        "title": "General Mitigation Factors/Workarounds"
      },
      {
        "category": "other",
        "text": "For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.",
        "title": "Support"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "This CISA CSAF advisory was converted from Hitachi Energy PSIRT\u0027s CSAF advisory.",
        "title": "Advisory Conversion Disclaimer"
      },
      {
        "category": "other",
        "text": "Energy, Water and Wastewater Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Switzerland",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-24-331-05 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-24-331-05.json"
      },
      {
        "category": "self",
        "summary": "Cybersecurity Advisory - Improper Certificate Validation in Hitachi\nEnergy\u2019s RTU500 series Product",
        "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-24-331-05 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-05"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Hitachi Energy RTU500 Scripting Interface",
    "tracking": {
      "current_release_date": "2023-12-19T13:30:00.000000Z",
      "generator": {
        "date": "2023-12-18T18:50:14.851000Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-24-331-05",
      "initial_release_date": "2023-12-19T13:30:00.000000Z",
      "revision_history": [
        {
          "date": "2023-12-19T13:30:00.000000Z",
          "number": "1.0.0",
          "summary": "Initial version."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "=1.0.1.30",
                "product": {
                  "name": "RTU500 Scripting interface version 1.0.1.30",
                  "product_id": "CSAFPID-0001"
                }
              },
              {
                "category": "product_version",
                "name": "=1.0.2",
                "product": {
                  "name": "RTU500 Scripting interface version 1.0.2",
                  "product_id": "CSAFPID-0002"
                }
              },
              {
                "category": "product_version",
                "name": "=1.1.1",
                "product": {
                  "name": "RTU500 Scripting interface version 1.1.1",
                  "product_id": "CSAFPID-0003"
                }
              },
              {
                "category": "product_version",
                "name": "=1.2.1",
                "product": {
                  "name": "RTU500 Scripting interface version 1.2.1",
                  "product_id": "CSAFPID-0004"
                }
              },
              {
                "category": "product_version_range",
                "name": "=ANY",
                "product": {
                  "name": "RTU500 Scripting Interface all versions",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "RTU500 Scripting interface"
          }
        ],
        "category": "vendor",
        "name": "Hitachi Energy"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-1514",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0004"
        ],
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "NVD - CVE-2023-1514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to RTU500 Scripting interface version 1.2.1",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "mitigation",
          "details": "Hitachi Energy recommends that customers follow the \u201cRemote Terminal Units Security Deployment Guideline\u201d, as well as to apply mitigation as described in the Mitigation Factors/Workarounds \nSection.",
          "product_ids": [
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.4,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.4,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    }
  ]
}

GHSA-R8HG-9V6R-2MQ2

Vulnerability from github – Published: 2023-12-19 15:30 – Updated: 2023-12-28 18:30

Details

Severity ?

7.4 (High)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-1514"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-295"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-12-19T15:15:08Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.",
  "id": "GHSA-r8hg-9v6r-2mq2",
  "modified": "2023-12-28T18:30:33Z",
  "published": "2023-12-19T15:30:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
    },
    {
      "type": "WEB",
      "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2023-3187

Vulnerability from csaf_certbund - Published: 2023-12-19 23:00 - Updated: 2023-12-19 23:00

Summary

Hitachi Energy RTU500: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.

Angriff

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identität des Dienstes zu fälschen oder einen Denial of Servie zu verursachen.

Betroffene Betriebssysteme

- Sonstiges

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identit\u00e4t des Dienstes zu f\u00e4lschen oder einen Denial of Servie zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-3187 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3187.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-3187 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3187"
      },
      {
        "category": "external",
        "summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
        "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2023-12-19",
        "url": "https://github.com/advisories/GHSA-r8hg-9v6r-2mq2"
      },
      {
        "category": "external",
        "summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
        "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184\u0026languageCode=en\u0026Preview=true"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2023-12-19",
        "url": "https://github.com/advisories/GHSA-x25m-g22v-6hgf"
      }
    ],
    "source_lang": "en-US",
    "title": "Hitachi Energy RTU500: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-12-19T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:03:01.382+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2023-3187",
      "initial_release_date": "2023-12-19T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-12-19T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 12.0.15",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 12.0.15",
                  "product_id": "T031450",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:12.0.15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 12.2.12",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 12.2.12",
                  "product_id": "T031451",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:12.2.12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 12.4.12",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 12.4.12",
                  "product_id": "T031452",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:12.4.12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 12.6.10",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 12.6.10",
                  "product_id": "T031453",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:12.6.10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 12.7.7",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 12.7.7",
                  "product_id": "T031454",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:12.7.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 13.2.7",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 13.2.7",
                  "product_id": "T031455",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:13.2.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 13.4.4",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 13.4.4",
                  "product_id": "T031457",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:13.4.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
                "product": {
                  "name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
                  "product_id": "T031763",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:scripting_interface__1.2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Hitachi Energy RTU500 \u003c 13.5.2",
                "product": {
                  "name": "Hitachi Energy RTU500 \u003c 13.5.2",
                  "product_id": "T031764",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:rtu500:13.5.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "RTU500"
          }
        ],
        "category": "vendor",
        "name": "Hitachi Energy"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-1514",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Das Problem besteht in der Komponente \"Scripting-Schnittstelle\". Der Client validiert die Parameter des vorgelegten Zertifikats nicht ordnungsgem\u00e4\u00df, so dass nicht \u00fcberpr\u00fcft werden kann, ob der Remote-Dienst vertrauensw\u00fcrdig ist. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Identit\u00e4t des Dienstes f\u00e4lschen und in der Folge \u00fcber die RTU500 Scripting-Schnittstelle initiierte Nachrichten abfangen."
        }
      ],
      "release_date": "2023-12-19T23:00:00.000+00:00",
      "title": "CVE-2023-1514"
    },
    {
      "cve": "CVE-2023-6711",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Speziell gestaltete Nachrichten werden nicht sachgem\u00e4\u00df validiert, was einen Puffer\u00fcberlauf und einen Neustart des Ger\u00e4tes verursachen kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Servie zu verursachen."
        }
      ],
      "release_date": "2023-12-19T23:00:00.000+00:00",
      "title": "CVE-2023-6711"
    }
  ]
}

GSD-2023-1514

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2023-1514

Aliases

CVE-2023-1514

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-1514",
    "id": "GSD-2023-1514"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-1514"
      ],
      "details": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.",
      "id": "GSD-2023-1514",
      "modified": "2023-12-13T01:20:41.569523Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cybersecurity@hitachienergy.com",
        "ID": "CVE-2023-1514",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "RTU500 Scripting Interface",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "1.0.1.30"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "1.0.2"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "1.1.1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Hitachi Energy"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-295",
                "lang": "eng",
                "value": "CWE-295 Improper Certificate Validation"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true",
            "refsource": "MISC",
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.1.30:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E327A74-D44E-4AAF-B191-C9F8A8F4FB34",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C34DFD88-6B0D-4683-8D23-808C6D251D82",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9EF5BA03-60D1-4A72-AE7A-82D3F1286446",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
          },
          {
            "lang": "es",
            "value": "Existe una vulnerabilidad en RTU500 Scripting interface. Cuando un cliente se conecta a un servidor mediante TLS, el servidor presenta un certificado. Este certificado vincula una clave p\u00fablica a la identidad del servicio y est\u00e1 firmado por Certification Authority (CA), lo que permite al cliente validar que se puede confiar en el servicio remoto y que no es malicioso. Si el cliente no valida los par\u00e1metros del certificado, los atacantes podr\u00edan falsificar la identidad del servicio. Un atacante podr\u00eda aprovechar la vulnerabilidad falsificando la identidad de un dispositivo RTU500 e interceptando los mensajes iniciados a trav\u00e9s de RTU500 Scripting interface."
          }
        ],
        "id": "CVE-2023-1514",
        "lastModified": "2023-12-28T17:00:22.227",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.2,
              "impactScore": 5.2,
              "source": "cybersecurity@hitachienergy.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2023-12-19T15:15:08.037",
        "references": [
          {
            "source": "cybersecurity@hitachienergy.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "sourceIdentifier": "cybersecurity@hitachienergy.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-295"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-295"
              }
            ],
            "source": "cybersecurity@hitachienergy.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

CNVD-2025-02738

Vulnerability from cnvd - Published: 2025-02-13

Title

Hitachi Energy RTU500 Scripting interface‌信任管理问题漏洞

Description

RTU500是日本日立制作所（Hitachi）公司的一系列工控组件，主要用于工业控制系统。RTU500 Scripting interface‌是Hitachi Energy RTU500系列工控组件的一部分，主要用于提供脚本编程接口，以实现特定的自动化控制和数据处理功能。该接口支持通过脚本编程来控制RTU500的各项功能，包括数据采集、控制命令的执行等。 Hitachi Energy RTU500 Scripting interface‌存在信任管理问题漏洞，该漏洞源于客户端不验证证书的参数，攻击者可利用漏洞通过伪造身份并拦截通过脚本接口发起的消息。

Severity

高

Patch Name

Hitachi Energy RTU500 Scripting interface‌信任管理问题漏洞的补丁

Patch Description

Formal description

厂商已发布补丁修复漏洞，请广大用户及时下载更新： https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152&languageCode=en&Preview=true

Reference

https://cxsecurity.com/cveshow/CVE-2023-1514/

Impacted products

Name
['Hitachi Energy RTU500 Scripting interface 1.0.1.30', 'Hitachi Energy RTU500 Scripting interface 1.0.2', 'Hitachi Energy RTU500 Scripting interface 1.1.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-1514",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
    }
  },
  "description": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002RTU500 Scripting interface\u200c\u662fHitachi Energy RTU500\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u7528\u4e8e\u63d0\u4f9b\u811a\u672c\u7f16\u7a0b\u63a5\u53e3\uff0c\u4ee5\u5b9e\u73b0\u7279\u5b9a\u7684\u81ea\u52a8\u5316\u63a7\u5236\u548c\u6570\u636e\u5904\u7406\u529f\u80fd\u3002\u8be5\u63a5\u53e3\u652f\u6301\u901a\u8fc7\u811a\u672c\u7f16\u7a0b\u6765\u63a7\u5236RTU500\u7684\u5404\u9879\u529f\u80fd\uff0c\u5305\u62ec\u6570\u636e\u91c7\u96c6\u3001\u63a7\u5236\u547d\u4ee4\u7684\u6267\u884c\u7b49\u3002\n\nHitachi Energy RTU500 Scripting interface\u200c\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5ba2\u6237\u7aef\u4e0d\u9a8c\u8bc1\u8bc1\u4e66\u7684\u53c2\u6570\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4f2a\u9020\u8eab\u4efd\u5e76\u62e6\u622a\u901a\u8fc7\u811a\u672c\u63a5\u53e3\u53d1\u8d77\u7684\u6d88\u606f\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u8865\u4e01\u4fee\u590d\u6f0f\u6d1e\uff0c\u8bf7\u5e7f\u5927\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttps://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-02738",
  "openTime": "2025-02-13",
  "patchDescription": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002RTU500 Scripting interface\u200c\u662fHitachi Energy RTU500\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u7528\u4e8e\u63d0\u4f9b\u811a\u672c\u7f16\u7a0b\u63a5\u53e3\uff0c\u4ee5\u5b9e\u73b0\u7279\u5b9a\u7684\u81ea\u52a8\u5316\u63a7\u5236\u548c\u6570\u636e\u5904\u7406\u529f\u80fd\u3002\u8be5\u63a5\u53e3\u652f\u6301\u901a\u8fc7\u811a\u672c\u7f16\u7a0b\u6765\u63a7\u5236RTU500\u7684\u5404\u9879\u529f\u80fd\uff0c\u5305\u62ec\u6570\u636e\u91c7\u96c6\u3001\u63a7\u5236\u547d\u4ee4\u7684\u6267\u884c\u7b49\u3002\r\n\r\nHitachi Energy RTU500 Scripting interface\u200c\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5ba2\u6237\u7aef\u4e0d\u9a8c\u8bc1\u8bc1\u4e66\u7684\u53c2\u6570\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4f2a\u9020\u8eab\u4efd\u5e76\u62e6\u622a\u901a\u8fc7\u811a\u672c\u63a5\u53e3\u53d1\u8d77\u7684\u6d88\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Hitachi Energy RTU500 Scripting interface\u200c\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Hitachi Energy RTU500 Scripting interface 1.0.1.30",
      "Hitachi Energy RTU500 Scripting interface 1.0.2",
      "Hitachi Energy RTU500 Scripting interface 1.1.1"
    ]
  },
  "referenceLink": "https://cxsecurity.com/cveshow/CVE-2023-1514/",
  "serverity": "\u9ad8",
  "submitTime": "2023-12-21",
  "title": "Hitachi Energy RTU500 Scripting interface\u200c\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2023-1514 (GCVE-0-2023-1514)

FKIE_CVE-2023-1514

ICSA-24-331-05

GHSA-R8HG-9V6R-2MQ2

WID-SEC-W-2023-3187

GSD-2023-1514

CNVD-2025-02738

Tags

Sightings

Nomenclature