VULNERABILITY INTELLIGENCE

CVE-2018-5473

CVSS score9.8 CRITICAL

EPSS probability5.89%

CISA KEVNot currently listed

Published2018-02-19

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. The SSH functions of the device are vulnerable to buffer overflow conditions that may allow a remote attacker to execute arbitrary code on the device.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

ics-cert@hq.dhs.gov — Broken Link
ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource