What is CVE-2025-1445?

CVE-2025-1445 is a high-severity vulnerability in Hitachi Energy Rtu500, classified under CWE-820. CVSS score: 7.5/10. Published 2025-03-25.

How severe is CVE-2025-1445?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Hitachi Energy Rtu500

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are configured using TLS on RTU500 device. It affects the CMU the IEC61850 stack is configured on.

EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Hitachi Energy Rtu500 — versions 13.7.1, 13.7.6

Weakness classification (CWE)

CWE-820

References

cybersecurity@hitachienergy.com

Frequently asked questions

What is CVE-2025-1445?: CVE-2025-1445 is a high-severity vulnerability in Hitachi Energy Rtu500, classified under CWE-820. CVSS score: 7.5/10. Published 2025-03-25.
How severe is CVE-2025-1445?: High severity. CVSS v3 base score is 7.5 out of 10.