CVE-2022-29492

Name of the Vulnerable Software and Affected Versions Hitachi Energy MicroSCADA Pro SYS600 versions 9.0 through 9.4 FP2 Hotfix 4 Hitachi Energy MicroSCADA X SYS600 versions 10 through 10.3.1

Description The issue is caused by improper input validation in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed packet, the packet is dropped, but the TCP connection is left open, potentially causing a denial-of-service if the affected connection is left open.

Recommendations For Hitachi Energy MicroSCADA Pro SYS600 versions 9.0 through 9.4 FP2 Hotfix 4, update to a version later than 9.4 FP2 Hotfix 4. For Hitachi Energy MicroSCADA X SYS600 versions 10 through 10.3.1, update to a version later than 10.3.1. As a temporary workaround, consider restricting access to the IEC 104 TCP connection to minimize the risk of exploitation.