HCI Modbus TCP Vulnerability in Hitachi Energy Products

CVE-2022-2081

Summary

The vulnerability in the HCI Modbus TCP function of Hitachi Energy's RTU500 arises due to inadequate flood control. When this function is enabled, an attacker can exploit the vulnerability by sending a series of specially crafted messages at a rapid rate, leading to the reboot of the targeted RTU500 CMU. This exploit stems from an internal stack overflow condition triggered by the overwhelming input, potentially disrupting operations relying on the affected systems. Organizations utilizing RTU500 devices should assess their configurations to mitigate this risk effectively.

References