Improper Disk Space Management in Hitachi Energy Devices
CVE-2025-1718

7.1HIGH

Key Information:

Vendor

Hitachi
Status
Relion 670/650 And Sam600-io
Vendor
CVE Published:
24 June 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-1718?

An authenticated user with FTP access privileges can exploit improper disk space management within Hitachi Energy's Relion 670/650 and SAM600-IO series devices. This vulnerability can lead to unintended reboots, impacting device availability and reliability.

Affected Version(s)

Relion 670/650 and SAM600-IO 2.2.6.0 <= 2.2.6.3

Relion 670/650 and SAM600-IO 2.2.5.0 <= 2.2.5.7

Relion 670/650 and SAM600-IO 2.2.4.0 <= 2.2.4.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-1718-Scanner
Created by issamjr

References

https://publisher.hitachienergy.com/preview?DocumentID=8D...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-1718 : Improper Disk Space Management in Hitachi Energy Devices