CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below

Medium · published December 4, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.

Incomplete or wrong received APDU frame layout may

cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer

with wrong length information of APDU or delayed reception

of data octets.

Only communication link of affected HCI IEC 60870-5-104

is blocked. If attack sequence stops the communication to

the previously attacked link gets normal again.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Published
2023-12-04T14:33Z
EPSS history
Timeline
  • 04 DEC 14:33Z
    A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below
    cvelistv5