Hitachi Energy RTU500 Series
Hitachi Energy is aware of multiple vulnerabilities that affect the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could potentially cause Denial of Service (DoS) impact on RTU500. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-39203US | — | — | ||
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting… | ||||
| CVE-2025-6021US | — | — | ||
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory… | ||||
| CVE-2024-45492US | critical9.8 | — | ||
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | ||||
| CVE-2024-45491US | critical9.8 | — | ||
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | ||||
| CVE-2024-45490US | high7.5 | Exploit | ||
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. | ||||
| CVE-2024-28757US | high7.5 | Exploit | ||
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). | ||||
| CVE-2023-2953US | high7.5 | — | ||
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Multiple Vulnerabilities in Hitachi Energy’s RTU 500 series Productself
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- ICS Advisory ICSA-25-259-02 JSONself
- ICS Advisory ICSA-25-259-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (13)
- MitigationRTU500 series CMU Firmware
Follow General Mitigation Factors/Workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors /workarounds
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- MitigationRTU500 series CMU Firmware
Follow general mitigation factors/workarounds.
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 12.7.8
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 13.7.7
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan