Critical Vulnerabilities Found in Hitachi Energy's Relion REB500
Basically, some users can access parts of a system they shouldn't, risking security.
Hitachi Energy has identified vulnerabilities in the Relion REB500 product. Users with certain roles can access unauthorized directories. This could jeopardize critical energy infrastructure. Immediate updates are recommended to mitigate risks.
What Happened
A serious security issue has emerged involving Hitachi Energy's Relion REB500 product. Authenticated users with specific roles can exploit vulnerabilities in the system, allowing them to access and modify directory contents? they aren't authorized to change. This could lead to unauthorized alterations in critical infrastructure settings, posing a significant risk to energy management systems worldwide.
The vulnerabilities, identified as CVE?-2026-2459 and CVE?-2026-2460, affect all versions of the Relion REB500 up to 8.3.3.0. The first vulnerability allows users with Installer roles to access restricted directories, while the second permits low-level users to alter directory content through the DAC protocol?. Both vulnerabilities have a medium severity rating, indicating they need immediate attention.
Why Should You Care
If you work in the energy sector or use Hitachi Energy products, this news is crucial for you. Your systems could be at risk if they run the affected versions, potentially leading to unauthorized access and manipulation of sensitive data. Imagine leaving the door to your home unlocked; it invites unwanted guests who can change things around without your permission.
The implications of these vulnerabilities stretch beyond just technical concerns. They could affect energy distribution, safety protocols, and even financial transactions tied to energy management. Therefore, it’s essential to act swiftly to protect your systems and data.
What's Being Done
Hitachi Energy is taking these vulnerabilities seriously and recommends immediate action. Here’s what you should do:
- Update to version 8.3.3.1 of the Relion REB500 to patch the vulnerabilities.
- As a temporary measure, consider disabling the Installer role and only enabling it during firmware updates.
- Follow general security practices to protect your network from external threats.
Experts are closely monitoring the situation to see if any malicious actors exploit these vulnerabilities before users can secure their systems. Stay vigilant and proactive to ensure your infrastructure remains safe.
CISA Advisories