Hitachi Energy RTU500 Series (Update B)
Hitachi Energy is aware of the vulnerabilities, CVE-2024-10037, CVE-2024-11499, CVE-2024-12169, and CVE-2025-1445 in the RTU500 Web server component, the IEC 60870-5-104 controlled station implementation and IEC 61850 implementation, that affects the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could trigger a restart of a RTU500 CMU. Please refer to the Recom-mended Immediate Actions for information about the available mitigation/remediation strategies.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-1445US | — | — | ||
A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specif… | ||||
| CVE-2024-12169US | — | — | ||
A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to rest… | ||||
| CVE-2024-11499US | — | — | ||
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability… | ||||
| CVE-2024-10037US | — | — | ||
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - Multiple Denial-of-Service Vulnerabilities in Hitachi Energy’s RTU500 Series Productself
- ICS Advisory ICSA-25-093-01 JSONself
- ICS Advisory ICSA-25-093-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (15)
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- FixedCMU Firmware
Fixed in version 13.7.1. Update to CMU Firmware version 13.7.7
- FixedCMU Firmware
Update to CMU Firmware version 13.5.4
- FixedCMU Firmware
Update to CMU Firmware version 13.7.7
- FixedCMU Firmware
Update to CMU Firmware version 13.7.7
- FixedHitachi Energy RTU500 series CMU Firmware version 12.0.1 – 12.0.14
Update to CMU Firmware version 12.7.8 when available
- FixedHitachi Energy RTU500 series CMU Firmware version 12.2.1 – 12.2.12
Update to CMU Firmware version 12.7.8 when available
- FixedHitachi Energy RTU500 series CMU Firmware version 12.4.1 – 12.4.11
Update to CMU Firmware version 12.7.8 when available
- FixedHitachi Energy RTU500 series CMU Firmware version 12.6.1 – 12.6.10
Update to CMU Firmware version 12.7.8 when available
- FixedHitachi Energy RTU500 series CMU Firmware version 12.7.1 – 12.7.7
Update to CMU Firmware version 12.7.8 when available
- FixedHitachi Energy RTU500 series CMU Firmware version 13.2.1 – 13.2.7
Fixed in version 13.7.1. Update to CMU Firmware version 13.7.7
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan