Hitachi Energy Relion REB500 Product
Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document. Authenticated users with certain roles can exploit the vulnerabilities to access and modify the directory contents they are not authorized to do so. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-2460US | high8.1 | — | ||
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not a… | ||||
| CVE-2026-2459US | high8.1 | — | ||
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so. | ||||
references
External citations — patches, advisories, analysis.
- Excessive Privilege Vulnerability in Hitachi Energy Relion REB500 Productself
- ICS Advisory ICSA-26-062-02 JSONself
- ICS Advisory ICSA-26-062-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationRelion REB500
Apply general mitigation factors
- MitigationRelion REB500
For CVE-2026-2459, as a mitigation strategy, users may also disable the Installer role and enable it only during the firmware update process.
- FixedRelion REB500
Hitachi Energy recommends that users update to version 8.3.3.1.
- FixedRelion REB500
Update to version 8.3.3.1
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan