Hitachi Energy RTU500 Product (Update A)
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. Successful exploitation of these vulnerabilities can result in the exposure of low-value user management information and device outage. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1773US | high7.5 | — | ||
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality… | ||||
| CVE-2026-1772US | medium5.3 | — | ||
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools lik… | ||||
| CVE-2025-59375US | — | — | ||
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. | ||||
| CVE-2024-8176US | — | Exploit | ||
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested… | ||||
references
External citations — patches, advisories, analysis.
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- Multiple Vulnerabilities in Hitachi Energy RTU500 Productself
- ICS Advisory ICSA-26-062-03 JSONself
- ICS Advisory ICSA-26-062-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan