CVE-2023-6711

Summary

CVE-2023-6711 is a newly discovered vulnerability in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 components of RTU500 series products. The issue lies in the improper validation of specially crafted messages sent to these components, leading to a buffer overflow and ultimately triggering a reboot of an RTU500 Control and Measuring Unit (CMU). The affected product versions include those listed below. This vulnerability could potentially be exploited remotely, posing a significant risk to industrial automation and control systems. Organizations using the RTU500 series should apply the recommended patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.