Hitachi Energy RTU500 Series (Update B)
Hitachi Energy is aware of the vulnerabilities, CVE-2024-10037, CVE-2024-11499, CVE-2024-12169, and CVE-2025-1445 in the RTU500 Web server component, the IEC 60870-5-104 controlled station implementation and IEC 61850 implementation, that affects the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could trigger a restart of a RTU500 CMU. Please refer to the Recom-mended Immediate Actions for information about the available mitigation/remediation strategies.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-1445US | — | — | ||
A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specif… | ||||
| CVE-2024-12169US | — | — | ||
A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to rest… | ||||
| CVE-2024-11499US | — | — | ||
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability… | ||||
| CVE-2024-10037US | — | — | ||
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cybersecurity Advisory - Multiple Denial-of-Service Vulnerabilities in Hitachi Energy’s RTU500 Series Productself
- ICS Advisory ICSA-25-093-01 JSONself
- ICS Advisory ICSA-25-093-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (15)
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- MitigationCMU Firmware
For all versions, apply General Mitigation Factors/Workarounds. Upgrade the system once remediated version in available, or apply general mitigation factors.
- BehobenCMU Firmware
Fixed in version 13.7.1. Update to CMU Firmware version 13.7.7
- BehobenCMU Firmware
Update to CMU Firmware version 13.5.4
- BehobenCMU Firmware
Update to CMU Firmware version 13.7.7
- BehobenCMU Firmware
Update to CMU Firmware version 13.7.7
- BehobenHitachi Energy RTU500 series CMU Firmware version 12.0.1 – 12.0.14
Update to CMU Firmware version 12.7.8 when available
- BehobenHitachi Energy RTU500 series CMU Firmware version 12.2.1 – 12.2.12
Update to CMU Firmware version 12.7.8 when available
- BehobenHitachi Energy RTU500 series CMU Firmware version 12.4.1 – 12.4.11
Update to CMU Firmware version 12.7.8 when available
- BehobenHitachi Energy RTU500 series CMU Firmware version 12.6.1 – 12.6.10
Update to CMU Firmware version 12.7.8 when available
- BehobenHitachi Energy RTU500 series CMU Firmware version 12.7.1 – 12.7.7
Update to CMU Firmware version 12.7.8 when available
- BehobenHitachi Energy RTU500 series CMU Firmware version 13.2.1 – 13.2.7
Fixed in version 13.7.1. Update to CMU Firmware version 13.7.7
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan