Hitachi Energy Rtu500 Series Cmu Firmware
13 CVEs affecting Hitachi Energy Rtu500 Series Cmu Firmware. Latest disclosed: 2026-09-29. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-8066 | Critical | 9.1 | 2026-09-29 | A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write… |
CVE-2026-8065 | Critical | 9.1 | 2026-09-29 | An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to uplo… |
CVE-2024-1531 | High | 8.2 | 2024-03-27 | A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random mem… |
CVE-2026-1773 | High | 7.5 | 2026-02-24 | IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-direc… |
CVE-2022-2081 | High | 7.5 | 2024-01-04 | A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attack… |
CVE-2022-28613 | High | 7.5 | 2022-05-02 | A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attac… |
CVE-2024-2617 | High | 7.2 | 2024-04-30 | A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on… |
CVE-2024-1532 | Medium | 6.8 | 2024-03-27 | A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnost… |
CVE-2026-8067 | Medium | 6.5 | 2026-09-29 | An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot th… |
CVE-2026-17539 | Medium | 5.9 | 2026-09-03 | RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry o… |
CVE-2023-6711 | Medium | 5.9 | 2023-12-19 | Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages se… |
CVE-2026-1772 | Medium | 5.3 | 2026-02-24 | RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requi… |
CVE-2026-8479 | | 2026-05-26 | IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a… |