CVE-2023-6711

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-67176.0A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as AsseCVE-2023-67187.5An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to CVE-2023-67196.1An XSS vulnerability has been detected in Repox, which allows an attacker to compromise interactions between a user and the vulnerable appliCVE-2023-67205.4An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on tCVE-2023-67217.5An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the CVE-2023-67227.5A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resultingCVE-2023-67239.8An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforCVE-2023-67248.8Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company HearingCVE-2023-67255.5An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND CVE-2023-67274.3Mattermost fails to perform correct authorization checks when creating a playbook action, allowing users without access to the playbook to cCVE-2023-67283.3Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted fCVE-2023-67297.3Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequent