Hitachi Energy RTU500 series faces denial of service vulnerability
A NULL pointer dereference flaw in Hitachi Energy RTU500 remote terminal units can interrupt network connections under high workload conditions.
FTMQ Security, written by our newsroom0 views
The Cybersecurity and Infrastructure Security Agency released an alert regarding security vulnerabilities in Hitachi Energy RTU500 product versions. The flaws can impact the confidentiality, integrity, and availability of affected systems. CISA indicates that high-load traffic scenarios can lead to service disruptions on the industrial equipment. [1]
According to CISA, sending General Interrogation requests at short intervals creates high-load conditions that trigger a NULL pointer dereference. This error occurs in the final entry of the enhanced message queue. The condition causes a fatal write error on the IEC 104 protocol, which results in a complete connection interruption. [1]
Hitachi Energy has issued mitigation and remediation steps to handle the issue. CISA urges operators to refer to the vendor recommendations to secure affected remote terminal units. [1]
As FTMQ Security reported earlier, Hitachi Energy previously addressed separate unauthenticated servlet access vulnerabilities in its Asset Suite software. That earlier issue allowed potential unauthorized system access through a test component named HTTPPublishAdapterTestServlet, which required updating to Asset Suite version 9.9.1. [2]
In short
- Hitachi Energy RTU500 series devices contain a NULL pointer dereference vulnerability.
- Frequent General Interrogation requests cause a fatal write error that interrupts IEC 104 network connections.
- The vulnerability affects system confidentiality, integrity, and operational availability.
- Hitachi Energy has released official remediation guidance for impacted systems.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Hitachi Energy RTU500 ProductCISA Alerts, 14h ago (the report this story comes from)
Background
- [2]Hitachi Energy warns of unauthenticated access flaw in Asset Suite FTMQ Security, 14d ago
Our newsroom writes these reports with the help of software, from the 2 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- High severity NVIDIA DCGM Exporter vulnerability threatens internet exposed GPU serversCybercrime and Scams, 11d ago
- Hitachi Energy warns of unauthenticated access flaw in Asset SuiteThreat Intelligence, 14d ago
More in Threat Intelligence
- CISA warns of SafePay ransomware targeting global critical infrastructure2h ago
- Hackers compromise AOMEI update servers to distribute malware1d ago
- Compromised CDU Heilbronn email account used in phishing attack on officials2d ago
- FBI and CISA warn of cyber threats targeting election officials3d ago
- US Agencies Release Guidelines for Super Intelligence Control Incidents4d ago
- China nexus hackers exploit zero day flaw in BeyondTrust support software4d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.