CVE-2025-1445: High severity rtu500 vulnerability
A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active.
Precondition is that IEC61850 as client or server are configured using TLS on RTU500 device. It affects the CMU the IEC61850 stack is configured on.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1445?
The severity of CVE-2025-1445 is critical due to its impact on the availability of IEC 61850 communication.
How do I fix CVE-2025-1445?
To fix CVE-2025-1445, update the RTU500 software to the latest version provided by the vendor.
What systems are affected by CVE-2025-1445?
CVE-2025-1445 affects the RTU500 systems that utilize IEC 61850 as client or server.
What is the impact of CVE-2025-1445?
CVE-2025-1445 can lead to downtime due to availability issues during renegotiation of active TLS connections.
When was CVE-2025-1445 reported?
CVE-2025-1445 was reported in the year 2025.