Vulnerability in Hitachi Energy Rtu500 Series Cmu Firmware
CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (17.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 17.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- Hitachi Energy Rtu500 Series Cmu Firmware — versions 12.7.1, 13.5.1, 13.6.1
- Hitachienergy Rtu520
- Hitachienergy Rtu520 Firmware — versions 13.8.1
- Hitachienergy Rtu530
- Hitachienergy Rtu530 Firmware — versions 13.8.1
- Hitachienergy Rtu540
- Hitachienergy Rtu540 Firmware — versions 13.8.1
- Hitachienergy Rtu560
- Hitachienergy Rtu560 Firmware — versions 13.8.1
Weakness classification (CWE)
References
- publisher.hitachienergy.com/preview (Vendor Advisory)
Frequently asked questions
- What is CVE-2026-1772?
- CVE-2026-1772 is a medium-severity vulnerability in Hitachi Energy Rtu500 Series Cmu Firmware, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 5.3/10. Published 2026-02-24.
- How severe is CVE-2026-1772?
- Medium severity. CVSS v3 base score is 5.3 out of 10.