Hitachi Energy RTU500 NULL Pointer Dereference Vulnerability in IEC 60870-5-104 Bidirectional Mode

A NULL pointer dereference vulnerability has been identified in the Hitachi Energy RTU500 series, specifically within the IEC 60870-5-104 protocol when used in bidirectional mode. This vulnerability can be exploited by sending a specially crafted sequence of messages over a period of time, leading to a denial-of-service condition. The issue arises only if the IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, leading to a loss of availability of the affected functionality.