Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-1514 (GCVE-0-2023-1514)
Vulnerability from cvelistv5
Published
2023-12-19 14:22
Modified
2024-08-02 05:49
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-295 - Improper Certificate Validation
Summary
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Hitachi Energy | RTU500 Scripting Interface |
Version: 1.0.1.30 Version: 1.0.2 Version: 1.1.1 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:49:11.678Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "RTU500 Scripting Interface",
"vendor": "Hitachi Energy",
"versions": [
{
"status": "affected",
"version": "1.0.1.30"
},
{
"status": "affected",
"version": "1.0.2"
},
{
"status": "affected",
"version": "1.1.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u0026nbsp;and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
}
],
"value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
}
],
"impacts": [
{
"capecId": "CAPEC-151",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-151 Identity Spoofing"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295 Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-19T14:22:37.619Z",
"orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"shortName": "Hitachi Energy"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"assignerShortName": "Hitachi Energy",
"cveId": "CVE-2023-1514",
"datePublished": "2023-12-19T14:22:37.619Z",
"dateReserved": "2023-03-20T12:32:04.973Z",
"dateUpdated": "2024-08-02T05:49:11.678Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2023-1514\",\"sourceIdentifier\":\"cybersecurity@hitachienergy.com\",\"published\":\"2023-12-19T15:15:08.037\",\"lastModified\":\"2024-11-21T07:39:20.810\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad en RTU500 Scripting interface. Cuando un cliente se conecta a un servidor mediante TLS, el servidor presenta un certificado. Este certificado vincula una clave p\u00fablica a la identidad del servicio y est\u00e1 firmado por Certification Authority (CA), lo que permite al cliente validar que se puede confiar en el servicio remoto y que no es malicioso. Si el cliente no valida los par\u00e1metros del certificado, los atacantes podr\u00edan falsificar la identidad del servicio. Un atacante podr\u00eda aprovechar la vulnerabilidad falsificando la identidad de un dispositivo RTU500 e interceptando los mensajes iniciados a trav\u00e9s de RTU500 Scripting interface.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cybersecurity@hitachienergy.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"cybersecurity@hitachienergy.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.1.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E327A74-D44E-4AAF-B191-C9F8A8F4FB34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C34DFD88-6B0D-4683-8D23-808C6D251D82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EF5BA03-60D1-4A72-AE7A-82D3F1286446\"}]}]}],\"references\":[{\"url\":\"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true\",\"source\":\"cybersecurity@hitachienergy.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
ICSA-24-331-05
Vulnerability from csaf_cisa
Published
2023-12-19 13:30
Modified
2023-12-19 13:30
Summary
Hitachi Energy RTU500 Scripting Interface
Notes
Summary
Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key
to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.
Notice
The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.
General Mitigation Factors/Workarounds
Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
Support
For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Hitachi Energy PSIRT's CSAF advisory.
Critical infrastructure sectors
Energy, Water and Wastewater Systems
Countries/areas deployed
Worldwide
Company headquarters location
Switzerland
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Hitachi Energy",
"summary": "reporting this vulnerability to CISA."
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/specification-document",
"text": "HIGH"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "summary",
"text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key\nto the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
"title": "Summary"
},
{
"category": "legal_disclaimer",
"text": "The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.",
"title": "Notice"
},
{
"category": "general",
"text": "Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.",
"title": "General Mitigation Factors/Workarounds"
},
{
"category": "other",
"text": "For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.",
"title": "Support"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Hitachi Energy PSIRT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Energy, Water and Wastewater Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Switzerland",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-24-331-05 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-24-331-05.json"
},
{
"category": "self",
"summary": "Cybersecurity Advisory - Improper Certificate Validation in Hitachi\nEnergy\u2019s RTU500 series Product",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-24-331-05 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-05"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Hitachi Energy RTU500 Scripting Interface",
"tracking": {
"current_release_date": "2023-12-19T13:30:00.000000Z",
"generator": {
"date": "2023-12-18T18:50:14.851000Z",
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-24-331-05",
"initial_release_date": "2023-12-19T13:30:00.000000Z",
"revision_history": [
{
"date": "2023-12-19T13:30:00.000000Z",
"number": "1.0.0",
"summary": "Initial version."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "=1.0.1.30",
"product": {
"name": "RTU500 Scripting interface version 1.0.1.30",
"product_id": "CSAFPID-0001"
}
},
{
"category": "product_version",
"name": "=1.0.2",
"product": {
"name": "RTU500 Scripting interface version 1.0.2",
"product_id": "CSAFPID-0002"
}
},
{
"category": "product_version",
"name": "=1.1.1",
"product": {
"name": "RTU500 Scripting interface version 1.1.1",
"product_id": "CSAFPID-0003"
}
},
{
"category": "product_version",
"name": "=1.2.1",
"product": {
"name": "RTU500 Scripting interface version 1.2.1",
"product_id": "CSAFPID-0004"
}
},
{
"category": "product_version_range",
"name": "=ANY",
"product": {
"name": "RTU500 Scripting Interface all versions",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "RTU500 Scripting interface"
}
],
"category": "vendor",
"name": "Hitachi Energy"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1514",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"CSAFPID-0004"
],
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
},
"references": [
{
"category": "external",
"summary": "NVD - CVE-2023-1514",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to RTU500 Scripting interface version 1.2.1",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
},
{
"category": "mitigation",
"details": "Hitachi Energy recommends that customers follow the \u201cRemote Terminal Units Security Deployment Guideline\u201d, as well as to apply mitigation as described in the Mitigation Factors/Workarounds \nSection.",
"product_ids": [
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.4,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.4,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
}
]
}
]
}
icsa-24-331-05
Vulnerability from csaf_cisa
Published
2023-12-19 13:30
Modified
2023-12-19 13:30
Summary
Hitachi Energy RTU500 Scripting Interface
Notes
Summary
Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key
to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.
Notice
The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.
General Mitigation Factors/Workarounds
Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
Support
For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Hitachi Energy PSIRT's CSAF advisory.
Critical infrastructure sectors
Energy, Water and Wastewater Systems
Countries/areas deployed
Worldwide
Company headquarters location
Switzerland
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Hitachi Energy",
"summary": "reporting this vulnerability to CISA."
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/specification-document",
"text": "HIGH"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "summary",
"text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key\nto the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
"title": "Summary"
},
{
"category": "legal_disclaimer",
"text": "The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warran-ties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software de-scribed in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.",
"title": "Notice"
},
{
"category": "general",
"text": "Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.",
"title": "General Mitigation Factors/Workarounds"
},
{
"category": "other",
"text": "For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.",
"title": "Support"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Hitachi Energy PSIRT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Energy, Water and Wastewater Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Switzerland",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-24-331-05 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-24-331-05.json"
},
{
"category": "self",
"summary": "Cybersecurity Advisory - Improper Certificate Validation in Hitachi\nEnergy\u2019s RTU500 series Product",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-24-331-05 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-05"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Hitachi Energy RTU500 Scripting Interface",
"tracking": {
"current_release_date": "2023-12-19T13:30:00.000000Z",
"generator": {
"date": "2023-12-18T18:50:14.851000Z",
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-24-331-05",
"initial_release_date": "2023-12-19T13:30:00.000000Z",
"revision_history": [
{
"date": "2023-12-19T13:30:00.000000Z",
"number": "1.0.0",
"summary": "Initial version."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "=1.0.1.30",
"product": {
"name": "RTU500 Scripting interface version 1.0.1.30",
"product_id": "CSAFPID-0001"
}
},
{
"category": "product_version",
"name": "=1.0.2",
"product": {
"name": "RTU500 Scripting interface version 1.0.2",
"product_id": "CSAFPID-0002"
}
},
{
"category": "product_version",
"name": "=1.1.1",
"product": {
"name": "RTU500 Scripting interface version 1.1.1",
"product_id": "CSAFPID-0003"
}
},
{
"category": "product_version",
"name": "=1.2.1",
"product": {
"name": "RTU500 Scripting interface version 1.2.1",
"product_id": "CSAFPID-0004"
}
},
{
"category": "product_version_range",
"name": "=ANY",
"product": {
"name": "RTU500 Scripting Interface all versions",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "RTU500 Scripting interface"
}
],
"category": "vendor",
"name": "Hitachi Energy"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1514",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"CSAFPID-0004"
],
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
},
"references": [
{
"category": "external",
"summary": "NVD - CVE-2023-1514",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to RTU500 Scripting interface version 1.2.1",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
},
{
"category": "mitigation",
"details": "Hitachi Energy recommends that customers follow the \u201cRemote Terminal Units Security Deployment Guideline\u201d, as well as to apply mitigation as described in the Mitigation Factors/Workarounds \nSection.",
"product_ids": [
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.4,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.4,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003"
]
}
]
}
]
}
gsd-2023-1514
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-1514",
"id": "GSD-2023-1514"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-1514"
],
"details": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.",
"id": "GSD-2023-1514",
"modified": "2023-12-13T01:20:41.569523Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cybersecurity@hitachienergy.com",
"ID": "CVE-2023-1514",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RTU500 Scripting Interface",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.1.30"
},
{
"version_affected": "=",
"version_value": "1.0.2"
},
{
"version_affected": "=",
"version_value": "1.1.1"
}
]
}
}
]
},
"vendor_name": "Hitachi Energy"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"impact": {
"cvss": [
{
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-295",
"lang": "eng",
"value": "CWE-295 Improper Certificate Validation"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true",
"refsource": "MISC",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.1.30:*:*:*:*:*:*:*",
"matchCriteriaId": "3E327A74-D44E-4AAF-B191-C9F8A8F4FB34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C34DFD88-6B0D-4683-8D23-808C6D251D82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EF5BA03-60D1-4A72-AE7A-82D3F1286446",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad en RTU500 Scripting interface. Cuando un cliente se conecta a un servidor mediante TLS, el servidor presenta un certificado. Este certificado vincula una clave p\u00fablica a la identidad del servicio y est\u00e1 firmado por Certification Authority (CA), lo que permite al cliente validar que se puede confiar en el servicio remoto y que no es malicioso. Si el cliente no valida los par\u00e1metros del certificado, los atacantes podr\u00edan falsificar la identidad del servicio. Un atacante podr\u00eda aprovechar la vulnerabilidad falsificando la identidad de un dispositivo RTU500 e interceptando los mensajes iniciados a trav\u00e9s de RTU500 Scripting interface."
}
],
"id": "CVE-2023-1514",
"lastModified": "2023-12-28T17:00:22.227",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2,
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary"
}
]
},
"published": "2023-12-19T15:15:08.037",
"references": [
{
"source": "cybersecurity@hitachienergy.com",
"tags": [
"Vendor Advisory"
],
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
],
"sourceIdentifier": "cybersecurity@hitachienergy.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary"
}
]
}
}
}
}
fkie_cve-2023-1514
Vulnerability from fkie_nvd
Published
2023-12-19 15:15
Modified
2024-11-21 07:39
Severity ?
7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Summary
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| hitachienergy | rtu500_scripting_interface | 1.0.1.30 | |
| hitachienergy | rtu500_scripting_interface | 1.0.2 | |
| hitachienergy | rtu500_scripting_interface | 1.1.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.1.30:*:*:*:*:*:*:*",
"matchCriteriaId": "3E327A74-D44E-4AAF-B191-C9F8A8F4FB34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C34DFD88-6B0D-4683-8D23-808C6D251D82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachienergy:rtu500_scripting_interface:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EF5BA03-60D1-4A72-AE7A-82D3F1286446",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad en RTU500 Scripting interface. Cuando un cliente se conecta a un servidor mediante TLS, el servidor presenta un certificado. Este certificado vincula una clave p\u00fablica a la identidad del servicio y est\u00e1 firmado por Certification Authority (CA), lo que permite al cliente validar que se puede confiar en el servicio remoto y que no es malicioso. Si el cliente no valida los par\u00e1metros del certificado, los atacantes podr\u00edan falsificar la identidad del servicio. Un atacante podr\u00eda aprovechar la vulnerabilidad falsificando la identidad de un dispositivo RTU500 e interceptando los mensajes iniciados a trav\u00e9s de RTU500 Scripting interface."
}
],
"id": "CVE-2023-1514",
"lastModified": "2024-11-21T07:39:20.810",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2,
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-12-19T15:15:08.037",
"references": [
{
"source": "cybersecurity@hitachienergy.com",
"tags": [
"Vendor Advisory"
],
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
],
"sourceIdentifier": "cybersecurity@hitachienergy.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
WID-SEC-W-2023-3187
Vulnerability from csaf_certbund
Published
2023-12-19 23:00
Modified
2023-12-19 23:00
Summary
Hitachi Energy RTU500: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identität des Dienstes zu fälschen oder einen Denial of Servie zu verursachen.
Betroffene Betriebssysteme
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identit\u00e4t des Dienstes zu f\u00e4lschen oder einen Denial of Servie zu verursachen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-3187 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3187.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-3187 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3187"
},
{
"category": "external",
"summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
},
{
"category": "external",
"summary": "GitHub Advisory Database vom 2023-12-19",
"url": "https://github.com/advisories/GHSA-r8hg-9v6r-2mq2"
},
{
"category": "external",
"summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184\u0026languageCode=en\u0026Preview=true"
},
{
"category": "external",
"summary": "GitHub Advisory Database vom 2023-12-19",
"url": "https://github.com/advisories/GHSA-x25m-g22v-6hgf"
}
],
"source_lang": "en-US",
"title": "Hitachi Energy RTU500: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-12-19T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:03:01.382+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-3187",
"initial_release_date": "2023-12-19T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-12-19T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.0.15",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.0.15",
"product_id": "T031450",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.0.15"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.2.12",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.2.12",
"product_id": "T031451",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.2.12"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.4.12",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.4.12",
"product_id": "T031452",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.4.12"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.6.10",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.6.10",
"product_id": "T031453",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.6.10"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.7.7",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.7.7",
"product_id": "T031454",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.7.7"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.2.7",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.2.7",
"product_id": "T031455",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.2.7"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.4.4",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.4.4",
"product_id": "T031457",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.4.4"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
"product": {
"name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
"product_id": "T031763",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:scripting_interface__1.2.1"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.5.2",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.5.2",
"product_id": "T031764",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.5.2"
}
}
}
],
"category": "product_name",
"name": "RTU500"
}
],
"category": "vendor",
"name": "Hitachi Energy"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1514",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Das Problem besteht in der Komponente \"Scripting-Schnittstelle\". Der Client validiert die Parameter des vorgelegten Zertifikats nicht ordnungsgem\u00e4\u00df, so dass nicht \u00fcberpr\u00fcft werden kann, ob der Remote-Dienst vertrauensw\u00fcrdig ist. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Identit\u00e4t des Dienstes f\u00e4lschen und in der Folge \u00fcber die RTU500 Scripting-Schnittstelle initiierte Nachrichten abfangen."
}
],
"release_date": "2023-12-19T23:00:00.000+00:00",
"title": "CVE-2023-1514"
},
{
"cve": "CVE-2023-6711",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Speziell gestaltete Nachrichten werden nicht sachgem\u00e4\u00df validiert, was einen Puffer\u00fcberlauf und einen Neustart des Ger\u00e4tes verursachen kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Servie zu verursachen."
}
],
"release_date": "2023-12-19T23:00:00.000+00:00",
"title": "CVE-2023-6711"
}
]
}
wid-sec-w-2023-3187
Vulnerability from csaf_certbund
Published
2023-12-19 23:00
Modified
2023-12-19 23:00
Summary
Hitachi Energy RTU500: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identität des Dienstes zu fälschen oder einen Denial of Servie zu verursachen.
Betroffene Betriebssysteme
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um die Identit\u00e4t des Dienstes zu f\u00e4lschen oder einen Denial of Servie zu verursachen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-3187 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3187.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-3187 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3187"
},
{
"category": "external",
"summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
},
{
"category": "external",
"summary": "GitHub Advisory Database vom 2023-12-19",
"url": "https://github.com/advisories/GHSA-r8hg-9v6r-2mq2"
},
{
"category": "external",
"summary": "Hitachi Cybersecurity Advisory vom 2023-12-19",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000184\u0026languageCode=en\u0026Preview=true"
},
{
"category": "external",
"summary": "GitHub Advisory Database vom 2023-12-19",
"url": "https://github.com/advisories/GHSA-x25m-g22v-6hgf"
}
],
"source_lang": "en-US",
"title": "Hitachi Energy RTU500: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-12-19T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:03:01.382+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-3187",
"initial_release_date": "2023-12-19T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-12-19T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.0.15",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.0.15",
"product_id": "T031450",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.0.15"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.2.12",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.2.12",
"product_id": "T031451",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.2.12"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.4.12",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.4.12",
"product_id": "T031452",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.4.12"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.6.10",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.6.10",
"product_id": "T031453",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.6.10"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 12.7.7",
"product": {
"name": "Hitachi Energy RTU500 \u003c 12.7.7",
"product_id": "T031454",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:12.7.7"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.2.7",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.2.7",
"product_id": "T031455",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.2.7"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.4.4",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.4.4",
"product_id": "T031457",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.4.4"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
"product": {
"name": "Hitachi Energy RTU500 Scripting interface \u003c 1.2.1",
"product_id": "T031763",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:scripting_interface__1.2.1"
}
}
},
{
"category": "product_name",
"name": "Hitachi Energy RTU500 \u003c 13.5.2",
"product": {
"name": "Hitachi Energy RTU500 \u003c 13.5.2",
"product_id": "T031764",
"product_identification_helper": {
"cpe": "cpe:/h:abb:rtu500:13.5.2"
}
}
}
],
"category": "product_name",
"name": "RTU500"
}
],
"category": "vendor",
"name": "Hitachi Energy"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1514",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Das Problem besteht in der Komponente \"Scripting-Schnittstelle\". Der Client validiert die Parameter des vorgelegten Zertifikats nicht ordnungsgem\u00e4\u00df, so dass nicht \u00fcberpr\u00fcft werden kann, ob der Remote-Dienst vertrauensw\u00fcrdig ist. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Identit\u00e4t des Dienstes f\u00e4lschen und in der Folge \u00fcber die RTU500 Scripting-Schnittstelle initiierte Nachrichten abfangen."
}
],
"release_date": "2023-12-19T23:00:00.000+00:00",
"title": "CVE-2023-1514"
},
{
"cve": "CVE-2023-6711",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Hitachi Energy RTU500. Speziell gestaltete Nachrichten werden nicht sachgem\u00e4\u00df validiert, was einen Puffer\u00fcberlauf und einen Neustart des Ger\u00e4tes verursachen kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Servie zu verursachen."
}
],
"release_date": "2023-12-19T23:00:00.000+00:00",
"title": "CVE-2023-6711"
}
]
}
ghsa-r8hg-9v6r-2mq2
Vulnerability from github
Published
2023-12-19 15:30
Modified
2023-12-28 18:30
Severity ?
VLAI Severity ?
Details
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.
{
"affected": [],
"aliases": [
"CVE-2023-1514"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-12-19T15:15:08Z",
"severity": "HIGH"
},
"details": "A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted\u00a0and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface.",
"id": "GHSA-r8hg-9v6r-2mq2",
"modified": "2023-12-28T18:30:33Z",
"published": "2023-12-19T15:30:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
},
{
"type": "WEB",
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
cnvd-2025-02738
Vulnerability from cnvd
Title: Hitachi Energy RTU500 Scripting interface信任管理问题漏洞
Description:
RTU500是日本日立制作所（Hitachi）公司的一系列工控组件，主要用于工业控制系统。RTU500 Scripting interface是Hitachi Energy RTU500系列工控组件的一部分，主要用于提供脚本编程接口，以实现特定的自动化控制和数据处理功能。该接口支持通过脚本编程来控制RTU500的各项功能，包括数据采集、控制命令的执行等。
Hitachi Energy RTU500 Scripting interface存在信任管理问题漏洞，该漏洞源于客户端不验证证书的参数，攻击者可利用漏洞通过伪造身份并拦截通过脚本接口发起的消息。
Severity: 高
Patch Name: Hitachi Energy RTU500 Scripting interface信任管理问题漏洞的补丁
Patch Description:
RTU500是日本日立制作所（Hitachi）公司的一系列工控组件，主要用于工业控制系统。RTU500 Scripting interface是Hitachi Energy RTU500系列工控组件的一部分，主要用于提供脚本编程接口，以实现特定的自动化控制和数据处理功能。该接口支持通过脚本编程来控制RTU500的各项功能，包括数据采集、控制命令的执行等。
Hitachi Energy RTU500 Scripting interface存在信任管理问题漏洞，该漏洞源于客户端不验证证书的参数，攻击者可利用漏洞通过伪造身份并拦截通过脚本接口发起的消息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
厂商已发布补丁修复漏洞，请广大用户及时下载更新： https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152&languageCode=en&Preview=true
Reference: https://cxsecurity.com/cveshow/CVE-2023-1514/
Impacted products
| Name | ['Hitachi Energy RTU500 Scripting interface 1.0.1.30', 'Hitachi Energy RTU500 Scripting interface 1.0.2', 'Hitachi Energy RTU500 Scripting interface 1.1.1'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2023-1514",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-1514"
}
},
"description": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002RTU500 Scripting interface\u200c\u662fHitachi Energy RTU500\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u7528\u4e8e\u63d0\u4f9b\u811a\u672c\u7f16\u7a0b\u63a5\u53e3\uff0c\u4ee5\u5b9e\u73b0\u7279\u5b9a\u7684\u81ea\u52a8\u5316\u63a7\u5236\u548c\u6570\u636e\u5904\u7406\u529f\u80fd\u3002\u8be5\u63a5\u53e3\u652f\u6301\u901a\u8fc7\u811a\u672c\u7f16\u7a0b\u6765\u63a7\u5236RTU500\u7684\u5404\u9879\u529f\u80fd\uff0c\u5305\u62ec\u6570\u636e\u91c7\u96c6\u3001\u63a7\u5236\u547d\u4ee4\u7684\u6267\u884c\u7b49\u3002\n\nHitachi Energy RTU500 Scripting interface\u200c\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5ba2\u6237\u7aef\u4e0d\u9a8c\u8bc1\u8bc1\u4e66\u7684\u53c2\u6570\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4f2a\u9020\u8eab\u4efd\u5e76\u62e6\u622a\u901a\u8fc7\u811a\u672c\u63a5\u53e3\u53d1\u8d77\u7684\u6d88\u606f\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u8865\u4e01\u4fee\u590d\u6f0f\u6d1e\uff0c\u8bf7\u5e7f\u5927\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttps://publisher.hitachienergy.com/preview?DocumentId=8DBD000152\u0026languageCode=en\u0026Preview=true",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2025-02738",
"openTime": "2025-02-13",
"patchDescription": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002RTU500 Scripting interface\u200c\u662fHitachi Energy RTU500\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u7528\u4e8e\u63d0\u4f9b\u811a\u672c\u7f16\u7a0b\u63a5\u53e3\uff0c\u4ee5\u5b9e\u73b0\u7279\u5b9a\u7684\u81ea\u52a8\u5316\u63a7\u5236\u548c\u6570\u636e\u5904\u7406\u529f\u80fd\u3002\u8be5\u63a5\u53e3\u652f\u6301\u901a\u8fc7\u811a\u672c\u7f16\u7a0b\u6765\u63a7\u5236RTU500\u7684\u5404\u9879\u529f\u80fd\uff0c\u5305\u62ec\u6570\u636e\u91c7\u96c6\u3001\u63a7\u5236\u547d\u4ee4\u7684\u6267\u884c\u7b49\u3002\r\n\r\nHitachi Energy RTU500 Scripting interface\u200c\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5ba2\u6237\u7aef\u4e0d\u9a8c\u8bc1\u8bc1\u4e66\u7684\u53c2\u6570\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4f2a\u9020\u8eab\u4efd\u5e76\u62e6\u622a\u901a\u8fc7\u811a\u672c\u63a5\u53e3\u53d1\u8d77\u7684\u6d88\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Hitachi Energy RTU500 Scripting interface\u200c\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Hitachi Energy RTU500 Scripting interface 1.0.1.30",
"Hitachi Energy RTU500 Scripting interface 1.0.2",
"Hitachi Energy RTU500 Scripting interface 1.1.1"
]
},
"referenceLink": "https://cxsecurity.com/cveshow/CVE-2023-1514/",
"serverity": "\u9ad8",
"submitTime": "2023-12-21",
"title": "Hitachi Energy RTU500 Scripting interface\u200c\u4fe1\u4efb\u7ba1\u7406\u95ee\u9898\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…