Insufficient Security Control Vulnerability
Priority LOW 36CWE-1188Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process where an older version of VxWorks is loaded prior to application firmware booting, could exploit the vulnerability in the older version of VxWorks and cause a denial-of-service on the product. This issue affects: Hitachi Energy Relion 670 Series 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.3. Hitachi Energy Relion 670/650 Series 2.2.0 all revisions; 2.2.4 all revisions. Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions.
Why it matters now
EPSS 0.00667 52nd percentileScored 2026-11-07
Fix Fixed Relion 670 Series (Hitachi Energy): 2.2.3.3
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hitachi Energy | Relion 670 Series | 2.2.2 all revisions; 2.2.3 to before 2.2.3.3 | 2.2.3.3 | Patch available | CNA |
| Hitachi Energy | Relion 670/650 Series | 2.2.0 all revisions; 2.2.4 all revisions | — | No fix listed | CNA |
| Hitachi Energy | Relion 670/650/SAM600-IO | 2.2.1 all revisions | — | No fix listed | CNA |
- Relion 670 Series VendorHitachi Energy Affected 2.2.2 all revisions; 2.2.3 to before 2.2.3.3 Fixed in 2.2.3.3 Patch available CNA
- Relion 670/650 Series VendorHitachi Energy Affected 2.2.0 all revisions; 2.2.4 all revisions Fixed in — No fix listed CNA
- Relion 670/650/SAM600-IO VendorHitachi Energy Affected 2.2.1 all revisions Fixed in — No fix listed CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hitachienergy:relion_670_firmware:*:*:*:*:*:*:*:* | 2.2.3 – 2.2.3.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_670:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
- cpe:2.3:o:hitachienergy:relion_670_firmware:*:*:*:*:*:*:*:* Versions 2.2.3 – 2.2.3.3 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_670:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
Show 2 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_sam600-io:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
- cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_sam600-io:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
Remediation
- Fix · CNA Relion 670 Series (Hitachi Energy) Fixed in 2.2.3.3
Timeline
- 2026-10-02 Threatist record created from CVE-2021-35535
- 2026-10-03 Alias added: GHSA-v26g-w7c2-rjj3
References
More Hitachi Energy Relion 650 Firmware vulnerabilities
- TI-2022-03099 IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products CVSS 3.1HIGH 7.5
- TI-2021-08743 Specially Crafted IEC 61850 Protocol Sequence Vulnerability CVSS 3.1HIGH 7.5
- TI-2019-13264 Improper input validation in Relion 650 and 670 Series CVSS 3.1HIGH 7.5
- TI-2021-14265 Insufficient Security Control Vulnerability CVSS 3.1HIGH 7.2
- TI-2023-04170 A vulnerability exists in the input validation of the GOOSE messages where out of range… CVSS 3.1HIGH 7.5
- TI-2022-03542 Improper signature verification in Hitachi Energy Relion 670/650/SAM600-IO Series CVSS 3.1MEDIUM 4.5
Sources
- CVE-2021-35535 · CVE Program
- CVE-2021-35535 · NVD
- FIRST EPSS
- GHSA-v26g-w7c2-rjj3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences