--- title: "Hitachi Energy relion 670 firmware vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/hitachi-energy/relion-670-firmware type: product description: "Hitachi Energy relion 670 firmware has 8 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2024-01-04 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Hitachi Energy relion 670 firmware vulnerabilities Vendor: [Hitachi Energy](https://radicalnotion.ai/vendor/hitachi-energy) - **Published CVEs:** 8 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 6 - **Average CVSS:** 7.5 - **First CVE:** 2019-11-27 - **Latest CVE:** 2024-01-04 - **Platforms:** relion 670 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 1 | | High | 6 | | Medium | 1 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 2 | | [CWE-1284](https://radicalnotion.ai/cwe/cwe-1284) | Improper Validation of Specified Quantity in Input | 1 | | [CWE-1188](https://radicalnotion.ai/cwe/cwe-1188) | Initialization of a Resource with an Insecure Default | 1 | | [CWE-274](https://radicalnotion.ai/cwe/cwe-274) | Improper Handling of Insufficient Privileges | 1 | | [CWE-347](https://radicalnotion.ai/cwe/cwe-347) | Improper Verification of Cryptographic Signature | 1 | | [CWE-404](https://radicalnotion.ai/cwe/cwe-404) | Improper Resource Shutdown or Release | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 2 | | 2020 | 0 | | 2021 | 3 | | 2022 | 0 | | 2023 | 2 | | 2024 | 1 | ## Affected versions (top 24 of 44) | Version | Kind | CVEs | | --- | --- | --- | | 2.2.0 | range | 4 | | 2.2.1 | range | 4 | | 2.2.2 | range | 4 | | 2.2.4 | range | 4 | | 2.2.3 | range | 3 | | 2.2.5 | range | 3 | | 2.1 | range | 2 | | \< 1p1r26 | range | 1 | | \<= 1.2.3.18 | range | 1 | | 1.1 | range | 1 | | 1.2 | range | 1 | | 1.2 \<= v \< 1.2.3.17 | range | 1 | | 1.2.3.17 | patched | 1 | | 1.2.3.20 | patched | 1 | | 1p1r26 | patched | 1 | | 2.0.0.10 | patched | 1 | | 2.0.0.13 | patched | 1 | | 2.1.0.1 | patched | 1 | | 2.2.0.13 | patched | 1 | | 2.2.1.6 | patched | 1 | | 2.2.2.3 | patched | 1 | | 2.2.2.6 | patched | 1 | | 2.2.3.2 | patched | 1 | | 2.2.3.7 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2022-3864 | - | medium | 4.5 | No | No | No | | CVE-2023-4518 | - | high | 7.5 | No | No | Yes | | CVE-2022-3353 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products | high | 7.5 | No | No | Yes | | CVE-2021-35534 | Insufficient Security Control Vulnerability | high | 7.2 | No | No | Yes | | CVE-2021-35535 | Insufficient Security Control Vulnerability | high | 8.1 | No | No | Yes | | CVE-2021-27196 | Specially Crafted IEC 61850 Protocol Sequence Vulnerability | high | 7.5 | No | No | Yes | | CVE-2019-18253 | - | critical | 10.0 | No | No | Yes | | CVE-2019-18247 | - | high | 7.5 | No | No | No | ## Frequently asked questions ### How many CVEs does Hitachi Energy relion 670 firmware have? Hitachi Energy relion 670 firmware has 8 published CVE records since 2019. ### How many Hitachi Energy relion 670 firmware CVEs are in CISA KEV? None of Hitachi Energy relion 670 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Hitachi Energy relion 670 firmware vulnerabilities? No Hitachi Energy relion 670 firmware CVEs currently have a tracked public exploit in this dataset. ### Which versions of Hitachi Energy relion 670 firmware are affected? 44 distinct Hitachi Energy relion 670 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Hitachi Energy relion 670 firmware CVEs? Hitachi Energy relion 670 firmware's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-274 (Improper Handling of Insufficient Privileges). ### How many critical Hitachi Energy relion 670 firmware vulnerabilities are there? Hitachi Energy relion 670 firmware has 1 critical and 6 high-severity CVEs. ### What is the average severity of Hitachi Energy relion 670 firmware CVEs? The average CVSS base score across Hitachi Energy relion 670 firmware's scored CVEs is 7.5. ## Other products from this vendor - [MicroSCADA X SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600) (20 CVEs) - [eSOMS](https://radicalnotion.ai/vendor/hitachi-energy/esoms) (19 CVEs) - [FOXMAN-UN](https://radicalnotion.ai/vendor/hitachi-energy/foxman-un) (15 CVEs) - [UNEM](https://radicalnotion.ai/vendor/hitachi-energy/unem) (15 CVEs) - [RTU500](https://radicalnotion.ai/vendor/hitachi-energy/rtu500) (13 CVEs) - [RTU500 series CMU firmware](https://radicalnotion.ai/vendor/hitachi-energy/rtu500-series-cmu-firmware) (13 CVEs) - [Asset Suite](https://radicalnotion.ai/vendor/hitachi-energy/asset-suite) (8 CVEs) - [MicroSCADA SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hitachi-energy/relion-670-firmware). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.