CVE-2021-35534 HIGH

Published: 2021-11-18 | Last Modified: 2024-11-21 | Status: Modified

Description

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product. This issue affects: Hitachi Energy Relion 670 Series 2.0 all revisions; 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.5. Hitachi Energy Relion 670/650 Series 2.1 all revisions. 2.2.0 all revisions; 2.2.4 all revisions; Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions; 2.2.5 versions prior to 2.2.5.2. Hitachi Energy Relion 650 1.0 all revisions. 1.1 all revisions; 1.2 all revisions; 1.3 versions prior to 1.3.0.8; Hitachi Energy GMS600 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 1.0.1 version 1.0.1.4 and prior versions; 1.1.0 version 1.1.0.1 and prior versions.

Additional Descriptions (1)

Una vulnerabilidad de control de seguridad insuficiente en el mecanismo de acceso a la base de datos interna de Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600, permite que un atacante que explote con éxito esta vulnerabilidad, de la que el producto no restringe suficientemente el acceso a las tablas de una base de datos interna, pueda permitir a cualquier persona con credenciales de usuario omitir los controles de seguridad que impone el producto. En consecuencia, una explotación puede conllevar a modificaciones no autorizadas en los datos/firmware, y/o inhabilitar permanentemente el producto. Este problema afecta a: Hitachi Energy Relion 670 Series versiones 2.0 todas las revisiones; versiones 2.2.2 todas las revisiones; versiones 2.2.3 versiones anteriores a la 2.2.3.5. Hitachi Energy Relion 670/650 Series versiones 2.1 todas las revisiones. versiones 2.2.0 todas las revisiones; versiones 2.2.4 todas las revisiones; Hitachi Energy Relion 670/650/SAM600-IO versiones 2.2.1 todas las revisiones; versiones 2.2.5 versiones anteriores a la 2.2.5.2. Hitachi Energy Relion 650 versiones 1.0 todas las revisiones. versiones 1.1 todas las revisiones; versiones 1.2 todas las revisiones; versiones 1.3 versiones anteriores a la 1.3.0.8; Hitachi Energy GMS600 versiones 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 versión 1.0.1 versión 1.0.1.4 y versiones anteriores; versión 1.1.0 versión 1.1.0.1 y versiones anteriores.

CVSS Metrics

Base Score: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.2

Impact Score: 5.9

Base Score: 9.0 (HIGH)

AV:N/AC:L/Au:S/C:C/I:C/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	SINGLE
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 8.0

Impact Score: 10.0

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-274
[email protected]	Primary	en CWE-269

Affected Products

Vendor	Product	Version	Update	Type
hitachienergy	gms600_firmware	1.2.0	<built-in method update of dict object at 0x72a9cd07bc80>	Operating System
hitachienergy	gms600_firmware	1.3.0	<built-in method update of dict object at 0x72a9b0db6000>	Operating System
hitachienergy	gms600_firmware	1.3.1.0	<built-in method update of dict object at 0x72a9cc5c0cc0>	Operating System
hitachienergy	relion_670_firmware	*	<built-in method update of dict object at 0x72a9cd079a00>	Operating System
hitachienergy	relion_670_firmware	2.0.0	<built-in method update of dict object at 0x72a9cd07b040>	Operating System
hitachienergy	relion_670_firmware	2.1.0	<built-in method update of dict object at 0x72a9cd07ae40>	Operating System
hitachienergy	relion_670_firmware	2.2.0	<built-in method update of dict object at 0x72a9b0db69c0>	Operating System
hitachienergy	relion_670_firmware	2.2.1	<built-in method update of dict object at 0x72a9cc5c08c0>	Operating System
hitachienergy	relion_670_firmware	2.2.2	<built-in method update of dict object at 0x72a9cc5c02c0>	Operating System
hitachienergy	relion_670_firmware	2.2.3	<built-in method update of dict object at 0x72a9cd07acc0>	Operating System
hitachienergy	relion_670_firmware	2.2.4	<built-in method update of dict object at 0x72a9cd0c3f80>	Operating System
hitachienergy	relion_670_firmware	2.2.5	<built-in method update of dict object at 0x72a9b0db7500>	Operating System
hitachienergy	relion_650_firmware	1.0.0	<built-in method update of dict object at 0x72a9cd0c2300>	Operating System
hitachienergy	relion_650_firmware	1.1.0	<built-in method update of dict object at 0x72a9b0db43c0>	Operating System
hitachienergy	relion_650_firmware	1.2.0	<built-in method update of dict object at 0x72a9b0c3df00>	Operating System
hitachienergy	relion_650_firmware	1.3.0	<built-in method update of dict object at 0x72a9b0db4740>	Operating System
hitachienergy	relion_650_firmware	2.1.0	<built-in method update of dict object at 0x72a9cd07b940>	Operating System
hitachienergy	relion_650_firmware	2.2.0	<built-in method update of dict object at 0x72a9cc5c0b40>	Operating System
hitachienergy	relion_650_firmware	2.2.1	<built-in method update of dict object at 0x72a9cc5c0740>	Operating System
hitachienergy	relion_650_firmware	2.2.4	<built-in method update of dict object at 0x72a9cc46e1c0>	Operating System
hitachienergy	relion_650_firmware	2.2.5	<built-in method update of dict object at 0x72a9cd0c3240>	Operating System
hitachienergy	relion_sam600-io_firmware	2.2.1	<built-in method update of dict object at 0x72a9b0db6e00>	Operating System
hitachienergy	relion_sam600-io_firmware	2.2.5	<built-in method update of dict object at 0x72a9b0db5c40>	Operating System
hitachienergy	pwc600_firmware	1.0.1.0	<built-in method update of dict object at 0x72a9cc60e340>	Operating System
hitachienergy	pwc600_firmware	1.0.1.1	<built-in method update of dict object at 0x72a9cd0c30c0>	Operating System
hitachienergy	pwc600_firmware	1.0.1.3	<built-in method update of dict object at 0x72a9e41d1540>	Operating System
hitachienergy	pwc600_firmware	1.0.1.4	<built-in method update of dict object at 0x72a9cd079640>	Operating System
hitachienergy	pwc600_firmware	1.1.0.0	<built-in method update of dict object at 0x72a9cc5c0400>	Operating System
hitachienergy	pwc600_firmware	1.1.0.1	<built-in method update of dict object at 0x72a9cc60c1c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:hitachienergy:gms600_firmware:1.2.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:gms600_firmware:1.3.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:gms600_firmware:1.3.1.0:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:hitachienergy:gms600:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware::::::::`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.0.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.1.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.1:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.2:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.3:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.4:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_670_firmware:2.2.5:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:hitachienergy:relion_670:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:1.0.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:1.1.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:1.2.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:1.3.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:2.1.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.1:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.4:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_650_firmware:2.2.5:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:hitachienergy:relion_650:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.1:::::::*`
Yes	`cpe:2.3:o:hitachienergy:relion_sam600-io_firmware:2.2.5:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:hitachienergy:relion_sam600-io:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.1:::::::*`
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.3:::::::*`
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.0.1.4:::::::*`
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.1.0.0:::::::*`
Yes	`cpe:2.3:o:hitachienergy:pwc600_firmware:1.1.0.1:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:hitachienergy:pwc600:-:::::::*`

References

https://search.abb.com/library/Download.aspx?DocumentID=8DBD000058&LanguageCode=en&DocumentPartId=&Action=Launch
Source: [email protected]

Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000059&LanguageCode=en&DocumentPartId=&Action=Launch
Source: [email protected]

Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000060&LanguageCode=en&DocumentPartId=&Action=Launch
Source: [email protected]

Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000058&LanguageCode=en&DocumentPartId=&Action=Launch
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000059&LanguageCode=en&DocumentPartId=&Action=Launch
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000060&LanguageCode=en&DocumentPartId=&Action=Launch
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory