Hitachi Energy Relion 670/650/SAM600-IO Initialization of a Resource with an Insecure Default (CVE-2021-35535)

high Tenable OT Security Plugin ID 500935

Synopsis

The remote OT asset is affected by a vulnerability.

Description

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process where an older version of VxWorks is loaded prior to application firmware booting, could exploit the vulnerability in the older version of VxWorks and cause a denial-of-service on the product. This issue affects: Hitachi Energy Relion 670 Series 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.3. Hitachi Energy Relion 670/650 Series 2.2.0 all revisions; 2.2.4 all revisions. Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.

Hitachi Energy recommends the following actions to mitigate this vulnerability:

- Relion 670/650 series Version 2.2.0: Upgrade to Version 2.2.5
- Relion 670/650/SAM600-IO series Version 2.2.1: Upgrade to Version 2.2.5
- Relion 670 series Version 2.2.2: Upgrade to Version 2.2.5
- Relion 670 series Version 2.2.3: Update to Revision 2.2.3.4 or upgrade to Version 2.2.5
- Relion 670/650 series Version 2.2.4: Upgrade to Version 2.2.5

Hitachi Energy recommends the following security practices and firewall configurations to help protect process control networks from attacks that originate from outside the network:

- Physically protect process control systems from direct access by unauthorized personnel.
- Do not directly connect to the Internet.
- Separate from other networks by means of a firewall system that has a minimal number of ports exposed.
- Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails.
- Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.

Please see Hitachi Energy advisory 8DBD000061 for additional mitigation and update information.

Plugin Details

Severity: High

ID: 500935

Version: 1.5

Type: remote

Family: Tenable.ot

Published: 3/29/2023

Updated: 3/4/2024

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2021-35535

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:hitachienergy:relion_650_firmware:2.2.0, cpe:/o:hitachienergy:relion_650_firmware:2.2.1, cpe:/o:hitachienergy:relion_650_firmware:2.2.4, cpe:/o:hitachienergy:relion_670_firmware, cpe:/o:hitachienergy:relion_670_firmware:2.2.0, cpe:/o:hitachienergy:relion_670_firmware:2.2.1, cpe:/o:hitachienergy:relion_670_firmware:2.2.2, cpe:/o:hitachienergy:relion_670_firmware:2.2.4, cpe:/o:hitachienergy:relion_sam600-io_firmware:2.2.1

Required KB Items: Tenable.ot/ABB

Exploit Ease: No known exploits are available

Patch Publication Date: 11/18/2021

Vulnerability Publication Date: 11/18/2021

Reference Information

CVE: CVE-2021-35535

CWE: 1188

Detections

Analytics