IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
Priority MEDIUM 41CWE-404Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-404.
Summary
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections. Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:mms:2.2.3:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:pwc600:1.2:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:7:*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:reb500:8:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:1.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.0.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:1.3.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.1.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.1:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relionSAM600-IO:2.2.5:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion670:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:relion650:2.2.*:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:rtu500cmu:12.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:rtu500cmu:13.*.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:2.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_4:3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:txpert_hub_coretec_5:3.0:*:*:*:*:*:*:*
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01105 65th percentileScored 2026-11-07
Fix Fixed FOX61x TEGO1 (Hitachi Energy): tego1_r16a11ITT600 SA Explorer (Hitachi Energy): ITT600 SA Explorer 2.1.1.2+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hitachi Energy | FOX61x TEGO1 | tego1_r15b08; tego1_r2a16_03; tego1_r2a16; tego1_r1e01; tego1_r1d02; tego1_r1c07; tego1_r1b02 | tego1_r16a11 | Patch available | CNA |
| Hitachi Energy | GMS600 | GMS600 1.3 | — | No fix listed | CNA |
| Hitachi Energy | ITT600 SA Explorer | ITT600 SA Explorer 1.1.0; ITT600 SA Explorer 1.1.1; ITT600 SA Explorer 1.1.2; ITT600 SA Explorer 1.5.0; ITT600 SA Explorer 1.5.1; ITT600 SA Explorer 1.6.0; ITT600 SA Explorer 1.6.0.1; ITT600 SA Explorer 1.7.0; ITT600 SA Explorer 1.7.2; ITT600 SA Explorer 1.8.0; ITT600 SA Explorer 2.0.1; ITT600 SA Explorer 2.0.2; ITT600 SA Explorer 2.0.3; ITT600 SA Explorer 2.0.4.1; ITT600 SA Explorer 2.0.5.0; ITT600 SA Explorer 2.0.5.4; ITT600 SA Explorer 2.1.0.4; ITT600 SA Explorer 2.1.0.5 | ITT600 SA Explorer 2.1.1.2 | Patch available | CNA |
| Hitachi Energy | MicroSCADA X SYS600 | SYS600 10; SYS600 10.1; SYS600 10.1.1; SYS600 10.2; SYS600 10.2.1; SYS600 10.3; SYS600 10.3.1; SYS600 10.4 | SYS600 10.4.1 | Patch available | CNA |
| Hitachi Energy | MSM | MSM 2.2.3;0 | — | No fix listed | CNA |
| Hitachi Energy | PWC600 | PWC600 1.0; PWC600 1.1; PWC600 1.2 | — | No fix listed | CNA |
| Hitachi Energy | REB500 | REB500 7.0 and later; REB500 8.0 and later | REB500 8.3.3.0 | Patch available | CNA |
| Hitachi Energy | Relion® 670 | Relion 670 1.2; Relion 670 2.0; Relion 670 version 2.1; Relion 670 2.2.0; Relion 670 2.2.1; Relion 670 2.2.2; Relion 670 2.2.3; Relion 670 2.2.4; Relion 670 2.2.5 | — | No fix listed | CNA |
| Hitachi Energy | Relion® 650 | Relion 650 1.1; Relion 650 1.3; Relion 650 2.1; Relion 650 2.2.0; Relion 650 2.2.1; Relion 650 2.2.2; Relion 650 2.2.3; Relion 650 2.2.4; Relion 650 2.2.5 | — | No fix listed | CNA |
| Hitachi Energy | SAM600-IO | Relion SAM600-IO 2.2.1; Relion SAM600-IO 2.2.5 | — | No fix listed | CNA |
| Hitachi Energy | RTU500 | RTU500 12.0.1 – 12.0.14; RTU500 12.2.1 – 12.2.11; RTU500 12.4.1 – 12.4.11; RTU500 12.6.1 – 12.6.8; RTU500 12.7.1 – 12.7.4; RTU500 13.2.1 – 13.2.5; RTU500 13.3.1 – 13.3.3; RTU500 13.4.1 | RTU500 12.0.15, RTU500 12.2.12, RTU500 12.4.12, RTU500 12.6.9, RTU500 12.7.5, RTU500 13.2.6, RTU500 13.3.4, RTU500 13.4.2 | Patch available | CNA |
| Hitachi Energy | TXpert Hub CoreTec 4 | all versions; all versions; all versions; all versions; all versions; all versions | — | No fix listed | CNA |
| Hitachi Energy | TXpert Hub CoreTec 5 | all versions | — | No fix listed | CNA |
- FOX61x TEGO1 VendorHitachi Energy Affected tego1_r15b08; tego1_r2a16_03; tego1_r2a16; tego1_r1e01; tego1_r1d02; tego1_r1c07; tego1_r1b02 Fixed in tego1_r16a11 Patch available CNA
- GMS600 VendorHitachi Energy Affected GMS600 1.3 Fixed in — No fix listed CNA
- ITT600 SA Explorer VendorHitachi Energy Affected ITT600 SA Explorer 1.1.0; ITT600 SA Explorer 1.1.1; ITT600 SA Explorer 1.1.2; ITT600 SA Explorer 1.5.0; ITT600 SA Explorer 1.5.1; ITT600 SA Explorer 1.6.0; ITT600 SA Explorer 1.6.0.1; ITT600 SA Explorer 1.7.0; ITT600 SA Explorer 1.7.2; ITT600 SA Explorer 1.8.0; ITT600 SA Explorer 2.0.1; ITT600 SA Explorer 2.0.2; ITT600 SA Explorer 2.0.3; ITT600 SA Explorer 2.0.4.1; ITT600 SA Explorer 2.0.5.0; ITT600 SA Explorer 2.0.5.4; ITT600 SA Explorer 2.1.0.4; ITT600 SA Explorer 2.1.0.5 Fixed in ITT600 SA Explorer 2.1.1.2 Patch available CNA
- MicroSCADA X SYS600 VendorHitachi Energy Affected SYS600 10; SYS600 10.1; SYS600 10.1.1; SYS600 10.2; SYS600 10.2.1; SYS600 10.3; SYS600 10.3.1; SYS600 10.4 Fixed in SYS600 10.4.1 Patch available CNA
- MSM VendorHitachi Energy Affected MSM 2.2.3;0 Fixed in — No fix listed CNA
- PWC600 VendorHitachi Energy Affected PWC600 1.0; PWC600 1.1; PWC600 1.2 Fixed in — No fix listed CNA
- REB500 VendorHitachi Energy Affected REB500 7.0 and later; REB500 8.0 and later Fixed in REB500 8.3.3.0 Patch available CNA
- Relion® 670 VendorHitachi Energy Affected Relion 670 1.2; Relion 670 2.0; Relion 670 version 2.1; Relion 670 2.2.0; Relion 670 2.2.1; Relion 670 2.2.2; Relion 670 2.2.3; Relion 670 2.2.4; Relion 670 2.2.5 Fixed in — No fix listed CNA
- Relion® 650 VendorHitachi Energy Affected Relion 650 1.1; Relion 650 1.3; Relion 650 2.1; Relion 650 2.2.0; Relion 650 2.2.1; Relion 650 2.2.2; Relion 650 2.2.3; Relion 650 2.2.4; Relion 650 2.2.5 Fixed in — No fix listed CNA
- SAM600-IO VendorHitachi Energy Affected Relion SAM600-IO 2.2.1; Relion SAM600-IO 2.2.5 Fixed in — No fix listed CNA
- RTU500 VendorHitachi Energy Affected RTU500 12.0.1 – 12.0.14; RTU500 12.2.1 – 12.2.11; RTU500 12.4.1 – 12.4.11; RTU500 12.6.1 – 12.6.8; RTU500 12.7.1 – 12.7.4; RTU500 13.2.1 – 13.2.5; RTU500 13.3.1 – 13.3.3; RTU500 13.4.1 Fixed in RTU500 12.0.15, RTU500 12.2.12, RTU500 12.4.12, RTU500 12.6.9, RTU500 12.7.5, RTU500 13.2.6, RTU500 13.3.4, RTU500 13.4.2 Patch available CNA
- TXpert Hub CoreTec 4 VendorHitachi Energy Affected all versions; all versions; all versions; all versions; all versions; all versions Fixed in — No fix listed CNA
- TXpert Hub CoreTec 5 VendorHitachi Energy Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 68
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hitachienergy:sys600_firmware:*:*:*:*:*:*:*:* | 10.1 – 10.3.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:sys600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:* | 12.0.1.0 – 12.0.14.0; 12.2.1.0 – 12.2.11.0; 12.4.1.0 – 12.4.11.0; 12.6.1.0 – 12.6.8.0; 12.7.1.0 – 12.7.4.0; 13.2.1.0 – 13.2.5.0; 13.3.1 – 13.3.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1:*:*:*:*:*:*:* | 13.4.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:rtu500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:* | 7.0 to before 8.3.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:reb500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:pwc600_firmware:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:pwc600_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:pwc600_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Hitachi Energy |
- cpe:2.3:o:hitachienergy:sys600_firmware:*:*:*:*:*:*:*:* Versions 10.1 – 10.3.1 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:sys600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:rtu500_firmware:*:*:*:*:*:*:*:* Versions 12.0.1.0 – 12.0.14.0; 12.2.1.0 – 12.2.11.0; 12.4.1.0 – 12.4.11.0; 12.6.1.0 – 12.6.8.0; 12.7.1.0 – 12.7.4.0; 13.2.1.0 – 13.2.5.0; 13.3.1 – 13.3.3 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1:*:*:*:*:*:*:* Versions 13.4.1 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:rtu500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:* Versions 7.0 to before 8.3.3 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:reb500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:pwc600_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:pwc600_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:pwc600_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Hitachi Energy
Show 58 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hitachienergy:pwc600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:modular_switchgear_monitoring_firmware:*:*:*:*:*:*:*:* | up to 2.2.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:modular_switchgear_monitoring:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.2:*:*:*:*:*:*:* | 1.1.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.1:*:*:*:*:*:*:* | 1.5.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* | 1.6.0.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* | 1.7.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* | 1.7.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* | 1.8.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.3:*:*:*:*:*:*:* | 2.0.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.4.1:*:*:*:*:*:*:* | 2.0.4.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.0:*:*:*:*:*:*:* | 2.0.5.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.4:*:*:*:*:*:*:* | 2.0.5.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* | 2.1.0.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* | 2.1.0.5 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_sam600-io:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:1.3:*:*:*:*:*:*:* | 1.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:relion_670:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:gms600_firmware:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:gms600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1b02:*:*:*:*:*:*:* | r1b02 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1c07:*:*:*:*:*:*:* | r1c07 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1d02:*:*:*:*:*:*:* | r1d02 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1e01:*:*:*:*:*:*:* | r1e01 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16:*:*:*:*:*:*:* | r2b16 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16_03:*:*:*:*:*:*:* | r2b16_03 | Vulnerable | Hitachi Energy |
| cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r15b08:*:*:*:*:*:*:* | r15b08 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:fox615_tego1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:* | 2.0.0 – 3.0.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:txpert_hub_coretec_4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
| cpe:2.3:o:hitachienergy:txpert_hub_coretec_5_firmware:3.0.0:*:*:*:*:*:*:* | 3.0.0 | Vulnerable | Hitachi Energy |
| cpe:2.3:h:hitachienergy:txpert_hub_coretec_5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitachi Energy |
- cpe:2.3:h:hitachienergy:pwc600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:modular_switchgear_monitoring_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.3 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:modular_switchgear_monitoring:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* Versions 1.6.0.1 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.4.1:*:*:*:*:*:*:* Versions 2.0.4.1 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.0:*:*:*:*:*:*:* Versions 2.0.5.0 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.5.4:*:*:*:*:*:*:* Versions 2.0.5.4 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.4:*:*:*:*:*:*:* Versions 2.1.0.4 Vulnerable ·Hitachi Energy
- cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.1.0.5:*:*:*:*:*:*:* Versions 2.1.0.5 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_sam600-io:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:relion_670:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:gms600_firmware:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:gms600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1b02:*:*:*:*:*:*:* Versions r1b02 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1c07:*:*:*:*:*:*:* Versions r1c07 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1d02:*:*:*:*:*:*:* Versions r1d02 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r1e01:*:*:*:*:*:*:* Versions r1e01 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16:*:*:*:*:*:*:* Versions r2b16 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r2b16_03:*:*:*:*:*:*:* Versions r2b16_03 Vulnerable ·Hitachi Energy
- cpe:2.3:o:hitachienergy:fox615_tego1_firmware:r15b08:*:*:*:*:*:*:* Versions r15b08 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:fox615_tego1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:* Versions 2.0.0 – 3.0.0 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:txpert_hub_coretec_4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
- cpe:2.3:o:hitachienergy:txpert_hub_coretec_5_firmware:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Hitachi Energy
- cpe:2.3:h:hitachienergy:txpert_hub_coretec_5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
Remediation
- Fix · CNA FOX61x TEGO1 (Hitachi Energy) Fixed in tego1_r16a11
- Fix · CNA ITT600 SA Explorer (Hitachi Energy) Fixed in ITT600 SA Explorer 2.1.1.2
- Fix · CNA MicroSCADA X SYS600 (Hitachi Energy) Fixed in SYS600 10.4.1
- Fix · CNA REB500 (Hitachi Energy) Fixed in REB500 8.3.3.0
- Fix · CNA RTU500 (Hitachi Energy) Fixed in RTU500 12.0.15, RTU500 12.2.12, RTU500 12.4.12, RTU500 12.6.9, RTU500 12.7.5, RTU500 13.2.6, RTU500 13.3.4, RTU500 13.4.2
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3353
- 2026-10-03 Alias added: GHSA-r27w-hfm7-9mc2
References
Advisory 10
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000125&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000126&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000128&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000133&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000129&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000130&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000131&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000127&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000132&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000124&LanguageCode=en&DocumentPartId=&Action=Launch
More Hitachi Energy Fox615 Tego1 Firmware vulnerabilities
- TI-2021-08743 Specially Crafted IEC 61850 Protocol Sequence Vulnerability CVSS 3.1HIGH 7.5
Sources
- CVE-2022-3353 · CVE Program
- CVE-2022-3353 · NVD
- FIRST EPSS
- GHSA-r27w-hfm7-9mc2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences