Hitachi Energy REB500
view advisory published 2026-09-29
Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-59375US | — | — | ||
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. | ||||
| CVE-2024-8176US | — | Exploit | ||
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested… | ||||
02
references
External citations — patches, advisories, analysis.
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- LibExpat Vulnerabilities in Hitachi Energy REB500 Productself
- ICS Advisory ICSA-26-279-05 JSONself
- ICS Advisory ICSA-26-279-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedREB500
Update to version 8.3.4.0
- FixedREB500
Update to version 8.3.4.0
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan