Hitachi Energy Relion REB500 Product
Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document. Authenticated users with certain roles can exploit the vulnerabilities to access and modify the directory contents they are not authorized to do so. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-2460US | high8.1 | — | ||
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not a… | ||||
| CVE-2026-2459US | high8.1 | — | ||
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Excessive Privilege Vulnerability in Hitachi Energy Relion REB500 Productself
- ICS Advisory ICSA-26-062-02 JSONself
- ICS Advisory ICSA-26-062-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationRelion REB500
Apply general mitigation factors
- MitigationRelion REB500
For CVE-2026-2459, as a mitigation strategy, users may also disable the Installer role and enable it only during the firmware update process.
- BehobenRelion REB500
Hitachi Energy recommends that users update to version 8.3.3.1.
- BehobenRelion REB500
Update to version 8.3.3.1
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan