Hitachi Energy RTU500 series
Hitachi Energy is aware of the vulnerabilities CVE-2023-5767, CVE-2023-5768 and CVE-2023-5769 in the Web server and HCI IEC 60870-5-104 component, that affects the RTU500 versions that are listed below. An at- tacker successfully exploiting these vulnerabilities could perform cross-site scripting on web server or denial of service on HCI IEC 60870-5-104. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5769US | medium6.1 | — | ||
A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due… | ||||
| CVE-2023-5768US | medium6.1 | — | ||
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.
Incomplete or wrong received APDU frame layout may
cause blocking… | ||||
| CVE-2023-5767US | medium6.1 | — | ||
A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cybersecurity Advisory - Multiple Vulnerabilities in Hitachi Energy’s RTU500 series Productself
- ICS Advisory ICSA-25-128-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-128-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- BehobenRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
- BehobenRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
- BehobenRTU500 series Product
Update to the respective series fixed versions - 12.0.15, 12.2.12, 12.4.12, 12.6.10, 12.7.7, 13.2.7, 13.4.4 (or 13.5.1)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan