Hitachi Energy REB500
Hitachi Energy REB500 8.3.3.1 and earlier can be crashed via libexpat flaws in IEC 61850 parsing.
36
CVE-2025-59375
- CVSS 3.1
- 7.5 high
- EPSS
- 1%p72
- Published
- ·
- Modified
Description · NVD
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
- Vendors
- libexpat project
- Products
- libexpat
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news
2 storiesUSN-8790-1: Expat vulnerabilities
Ubuntu patched three Expat denial-of-service vulnerabilities, including excessive memory allocation on crafted documents and an infinite loop on DTD content.
28