Hitachi Energy RTU500 Series Product (Update B)
view advisory published 2024-04-30
Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-2617US | — | — | ||
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update,
if secure update feature was not enabled on all
CMUs of a RTU500.… | ||||
02
references
External citations — patches, advisories, analysis.
- Secure Update Bypass Vulnerability in Hitachi Energy RTU500 series Productself
- ICS Advisory ICSA-25-023-02 JSONself
- ICS Advisory ICSA-25-023-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.5.4 or latest and enable secure update feature on all CMUs of an RTU500.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan