Hitachi Energy RTU500 series
Hitachi Energy is aware of the vulnerabilities CVE-2023-5767, CVE-2023-5768 and CVE-2023-5769 in the Web server and HCI IEC 60870-5-104 component, that affects the RTU500 versions that are listed below. An at- tacker successfully exploiting these vulnerabilities could perform cross-site scripting on web server or denial of service on HCI IEC 60870-5-104. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5769US | medium6.1 | — | ||
A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due… | ||||
| CVE-2023-5768US | medium6.1 | — | ||
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.
Incomplete or wrong received APDU frame layout may
cause blocking… | ||||
| CVE-2023-5767US | medium6.1 | — | ||
A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - Multiple Vulnerabilities in Hitachi Energy’s RTU500 series Productself
- ICS Advisory ICSA-25-128-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-128-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- FixedRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
- FixedRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
- FixedRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan