Hitachi Energy RTU500 Series Product (Update B)
Advisory ansehen veröffentlicht 2024-04-30
Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-2617US | — | — | ||
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update,
if secure update feature was not enabled on all
CMUs of a RTU500.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Secure Update Bypass Vulnerability in Hitachi Energy RTU500 series Productself
- ICS Advisory ICSA-25-023-02 JSONself
- ICS Advisory ICSA-25-023-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenRTU500 series CMU Firmware
Update to CMU Firmware version 13.5.4 or latest and enable secure update feature on all CMUs of an RTU500.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan