CVE-2023-4518 MEDIUM

CVE-2023-4518

Vendor Hitachi Energy
Product Relion670
Weakness CWE-1284
Published December 1, 2023
Last update September 23, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.

Key dates

02Disclosure timeline

December 1, 2023 CVE published
September 23, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-36428 IBM Db2 Denial of Service CVE-2024-23593 CVE-2026-26934 Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service CVE-2024-9448 On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the rule was to drop the packet, the packet will not be dropp CVE-2026-47329 Incorrect validation of field size in Ubuntu Linux AppArmor notification responses