CVE-2022-3864 in Relion 650info

Summary

by MITRE • 01/04/2024

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and attempt to update the IED with a malicious update package. Successful exploitation of this vulnerability will cause the IED to restart, causing a temporary Denial of Service.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

11/04/2022

Disclosure

01/04/2024

Moderation

accepted

CPE

ready

EPSS

0.00033

KEV

no

Activities

very low

Sources

Do you know our Splunk app?

Download it now for free!