CVE-2024-1531

high

Description

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-116-01

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true

Details

Source: Mitre, NVD

Published: 2024-03-27

Updated: 2024-03-27

CVSS v3

Base Score: 8.2

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H

Severity: High