CVE-2026-8479
BaseFortify
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: Hitachi Energy
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects the IEC 60870-5-104 protocol when it is used in bidirectional mode (BCI). It involves a NULL pointer dereferencing issue that can be triggered by sending a specially crafted sequence of messages over a certain period of time.
The result of this vulnerability is a Denial of Service (DoS) condition, meaning the affected system or service can become unavailable or stop functioning properly.
The product is only vulnerable if the IEC 60870-5-104 functionality is configured in bidirectional mode.
How can this vulnerability impact me? :
The primary impact of this vulnerability is Denial of Service (DoS). An attacker who sends a specially crafted sequence of messages can cause the affected system to crash or become unresponsive.
This can disrupt normal operations, potentially causing downtime or loss of availability of critical services that rely on the IEC 60870-5-104 protocol in bidirectional mode.