Hitachi Energy RTU500 Series
Hitachi Energy is aware of multiple vulnerabilities that affect the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could potentially cause Denial of Service (DoS) impact on RTU500. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-39203US | — | — | ||
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting… | ||||
| CVE-2025-6021US | — | — | ||
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory… | ||||
| CVE-2024-45492US | critical9.8 | — | ||
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | ||||
| CVE-2024-45491US | critical9.8 | — | ||
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | ||||
| CVE-2024-45490US | high7.5 | Exploit | ||
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. | ||||
| CVE-2024-28757US | high7.5 | Exploit | ||
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). | ||||
| CVE-2023-2953US | high7.5 | — | ||
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. | ||||
references
External citations — patches, advisories, analysis.
- Multiple Vulnerabilities in Hitachi Energy’s RTU 500 series Productself
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- ICS Advisory ICSA-25-259-02 JSONself
- ICS Advisory ICSA-25-259-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (13)
- MitigationRTU500 series CMU Firmware
Follow General Mitigation Factors/Workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors /workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan