ICSA-26-062-03

icsaUScisa_csaf_ot

Hitachi Energy RTU500 Product (Update A)

Advisory ansehen veröffentlicht 2026-02-24

Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. Successful exploitation of these vulnerabilities can result in the exposure of low-value user management information and device outage. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-1773UShigh7.5—
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality…
CVE-2026-1772USmedium5.3—
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools lik…
CVE-2025-59375US——
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVE-2024-8176US—Exploit
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationRTU500 series CMU Firmware

    Follow general mitigation factors/workarounds

  • MitigationRTU500 series CMU Firmware

    Follow general mitigation factors/workarounds

  • MitigationRTU500 series CMU Firmware

    Follow general mitigation factors/workarounds

  • MitigationRTU500 series CMU Firmware

    Follow general mitigation factors/workarounds

  • BehobenRTU500 series CMU Firmware

    Update to CMU Firmware version 12.7.8

  • BehobenRTU500 series CMU Firmware

    Update to CMU Firmware version 12.7.8

  • BehobenRTU500 series CMU Firmware

    Update to CMU Firmware version 12.7.8

  • BehobenRTU500 series CMU Firmware

    Update to CMU Firmware version 12.7.8

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan