Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

TI-2021-14265 CVE-2021-35534 · GHSA-72pf-j5fj-gg32

Insufficient Security Control Vulnerability

Priority LOW 35

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of w…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01792 Published 2021-11-18 Fixed in 2.2.3.5, 2.2.5.2 +1 CWE-274
TI-2021-14266 CVE-2021-35535 · GHSA-v26g-w7c2-rjj3

Insufficient Security Control Vulnerability

Priority LOW 36

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit…

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00667 Published 2021-11-18 Fixed in 2.2.3.3 CWE-1188
Priority LOW 36

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an atta…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01575 Published 2021-06-14 No fix listed CWE-20
TI-2019-13270 CVE-2019-18253 · GHSA-qjjj-g2xr-56qr

Path traversal in Relion 670 Series

Priority MEDIUM 47

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0198 Published 2019-11-27 No fix listed CWE-22
Priority LOW 36

An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of servi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01551 Published 2019-11-27 No fix listed CWE-20