CVE-2025-2403

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM (Line Distance Communication Module) to malfunction.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
Hitachi Energy	Relion 670/650 and SAM600-IO	>= 2.2.6.0, <= 2.2.6.2; 2.2.5.6; 2.2.4.4; 2.2.3.7; 2.2.2.6

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000216&LanguageCode=en&DocumentPartId=&Action=Launch

Timeline

Published: Jun 24, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-240307.1Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access CVE-2025-240315.1PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 modul CVE-2025-240329.2PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to CVE-2025-240337.5@fastify/multipart is a Fastify plugin for parsing the multipart content-type. Prior to versions 8.3.1 and 9.0.3, the `saveRequestFiles` fun CVE-2025-240343.2Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Starting in version 0.7.0 and prior to versions 0.7.15 and CVE-2025-240358.1Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a CVE-2025-240367.0Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability CVE-2025-240397.3Visual Studio Code Elevation of Privilege Vulnerability CVE-2025-24044.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ubit Information Technologies S CVE-2025-240427.3Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability CVE-2025-240437.5Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.CVE-2025-240447.8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.