Hitachi Energy RTU500 Product
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-17539US | — | — | ||
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced messag… | ||||
| CVE-2026-9079US | — | — | ||
libcurl had a flaw that when instructed to clear proxy authentication
credentials which made it not do so, leaving the old credentials around to get
used for subsequent transfers t… | ||||
| CVE-2026-8932US | — | Exploit | ||
libcurl would reuse a previously created connection even when some mTLS config
related option had been changed that should have prohibited reuse.
libcurl keeps previously used con… | ||||
| CVE-2026-8927US | —OT elevated | — | ||
When reusing a libcurl handle for sequential transfers driven by
environment-variable proxy configuration, libcurl fails to clear the proxy
authentication state between requests. S… | ||||
| CVE-2026-11856US | —OT elevated | — | ||
Successfully using libcurl to do a transfer to a specific HTTP origin
(`hostA`) with **Digest** authentication and then changing the origin to a
different one (`hostB`) for a secon… | ||||
| CVE-2026-6653US | critical9.8 | — | ||
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML inp… | ||||
| CVE-2026-6276US | high7.5OT elevated | — | ||
Using libcurl, when a custom `Host:` header is first set for an HTTP request
and a second request is subsequently done using the same *easy handle* but
without the custom `Host:` h… | ||||
| CVE-2026-6732US | high7.5 | — | ||
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entit… | ||||
| CVE-2026-28388US | high7.5 | — | ||
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension
is processed a NULL pointer dereference might happen if the required CRL
Number extension is missing.… | ||||
references
External citations — patches, advisories, analysis.
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- Multiple Vulnerabilities in Hitachi Energy RTU500 Productself
- ICS Advisory ICSA-26-293-05 JSONself
- ICS Advisory ICSA-26-293-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (18)
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8 OR
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8 OR
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8 OR
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
- FixedRTU500 series CMU Firmware
Update to CMU Firmware version 13.9.1
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan