Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series

Description

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.

Scores

EPSS (exploitation in 30 days)

0.99% · top 37% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• CWE-1284 Improper Validation of Specified Quantity in Input (opens in a new tab)All about CWE-1284 and its CVEs

Affected products

• Hitachi Energy · RTU500 series CMU Firmware

  • affected 12.0.*
  • affected 12.2.*
  • affected 12.4.*
  • affected 12.6.*
  • affected 12.7.*
  • affected 13.2.*

What to do

Solution: Remediation available, see the advisory for details.

References (2)

• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000103&LanguageCode=en&DocumentPartId=&Action=Launch (opens in a new tab)vendor-advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000103&LanguageCode=en&DocumentPartId=&Action=Launch (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-28613](https://trackcve.app/badge/CVE-2022-28613.svg)](https://trackcve.app/cve/CVE-2022-28613)

Record last updated 25 Sept 2024, 07:58 UTC.