ICSA-24-116-01

icsaUScisa_csaf_ot

Hitachi Energy RTU500 Series

view advisory published 2024-04-25

Successful exploitation of these vulnerabilities could allow the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-1532US——
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displa…
CVE-2024-1531US——
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RT…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationRTU500 series CMU Firmware

    Hitachi Energy has released the following mitigations for CVE-2024-1531 and CVE-2024-1532:

  • MitigationRTU500 series CMU Firmware

    Hitachi Energy has released the following mitigations for CVE-2024-1531 and CVE-2024-1532:

  • FixedRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 12.7.1 - 12.7.6: Update to CMU Firmware Version 12.7.7

  • FixedRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 12.7.1 - 12.7.6: Update to CMU Firmware Version 12.7.7

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan