Vulnerability in Hitachi Energy Rtu500 Series Cmu Firmware
CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Hitachi Energy Rtu500 Series Cmu Firmware — versions 12.7.1, 13.5.1, 13.6.1
- Hitachienergy Rtu520
- Hitachienergy Rtu520_firmware — versions 13.8.1
- Hitachienergy Rtu530
- Hitachienergy Rtu530_firmware — versions 13.8.1
- Hitachienergy Rtu540
- Hitachienergy Rtu540_firmware — versions 13.8.1
- Hitachienergy Rtu560
- Hitachienergy Rtu560_firmware — versions 13.8.1
Weakness classification (CWE)
References
- cybersecurity@hitachienergy.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2026-1772?
- CVE-2026-1772 is a medium-severity vulnerability in Hitachi Energy Rtu500 Series Cmu Firmware, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 5.3/10. Published 2026-02-24.
- How severe is CVE-2026-1772?
- Medium severity. CVSS v3 base score is 5.3 out of 10.