CVE-2022-3353

CVE-2022-3353 is a vulnerability in the IEC 61850 communication stack affecting multiple Hitachi Energy products, including FOX61x TEGO1, GMS600, ITT600 SA Explorer, MicroSCADA X SYS600, MMS, PWC600, REB500, Relion670, Relion650, RelionSAM600-IO, RTU500CMU, TXPERT Hub CoreTec 4, and TXPERT Hub CoreTec 5. An unauthenticated attacker can exploit this vulnerability remotely by sending a specially crafted message sequence, causing the IEC 61850 MMS-server communication stack to stop accepting new client connections, leading to a denial of service. Existing connections remain unaffected. This vulnerability has a CVSS v3.1 score of 7.5 (High), indicating a high severity. The attack vector is network-based with low attack complexity, requiring no privileges or user interaction, and resulting in high impact to availability. The EPSS score is low, suggesting a low probability of exploitation. Currently, there is no evidence of active exploitation in the wild, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of reported vulnerabilities.