Hitachi Energy RTU500

Name: Hitachi Energy RTU500
Brand: Hitachi Energy

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical14high3medium0low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-9195US	high7.5OT high	81.3% (100th)	Exploit	12.7.8	2015-01-17	2 versions
CVE-2026-8065US	—OT elevated	0.49% (42nd)	Exploit	12.7.8	2026-09-29	2 versions
CVE-2020-36228US	high7.5	85.0% (100th)	—	12.6.7	2021-01-26	4 versions
CVE-2020-36221US	high7.5	85.0% (100th)	—	13.2.3	2021-01-26	4 versions
CVE-2020-36227US	high7.5	77.2% (100th)	—	12.6.7	2021-01-26	4 versions
CVE-2020-36222US	high7.5	77.2% (100th)	—	12.7.2	2021-01-26	4 versions
CVE-2010-2965US	high10.0OT high	57.5% (99th)	—	13.9.1	2010-08-05	2 versions
CVE-2020-36230US	high7.5	12.1% (96th)	—	12.7.2	2021-01-26	4 versions
CVE-2020-36229US	high7.5	4.35% (91st)	—	12.4.11	2021-01-26	4 versions
CVE-2020-36225US	high7.5	4.35% (91st)	—	12.4.11	2021-01-26	4 versions
CVE-2020-36224US	high7.5	4.35% (91st)	—	12.7.2	2021-01-26	4 versions
CVE-2020-36226US	high7.5OT elevated	4.23% (91st)	—	13.2.3	2021-01-26	4 versions
CVE-2020-36223US	high7.5	4.23% (91st)	—	12.6.7	2021-01-26	4 versions
CVE-2022-3353US	high7.5	1.10% (66th)	—	no fix	2023-02-21	8 versions
CVE-2026-8066US	—	0.74% (54th)	—	12.7.8	2026-09-29	2 versions
CVE-2024-2617US	—	0.67% (52nd)	—	no fix	2024-04-30	3 versions
CVE-2024-1532US	—	0.57% (47th)	—	12.2.12	2024-03-27	8 versions
CVE-2026-1773US	high7.5	0.46% (39th)	—	no fix	2026-02-24	3 versions
CVE-2024-1531US	—	0.45% (39th)	—	12.4.12	2024-03-27	8 versions
CVE-2023-5769US	medium6.1	0.41% (35th)	—	no fix	2023-12-14	7 versions
CVE-2024-12169US	—	0.40% (35th)	—	no fix	2025-03-25	10 versions
CVE-2023-5767US	medium6.1	0.39% (33rd)	—	no fix	2023-12-04	7 versions
CVE-2024-10037US	—	0.35% (28th)	—	no fix	2025-03-25	14 versions
CVE-2025-1445US	—	0.34% (27th)	—	no fix	2025-03-25	4 versions
CVE-2023-46143US	—OT elevated	0.33% (26th)	—	12.7.8	2023-12-14	2 versions
CVE-2026-1772US	medium5.3	0.29% (22nd)	—	no fix	2026-02-24	3 versions
CVE-2024-11499US	—	0.25% (16th)	—	no fix	2025-03-25	11 versions
CVE-2026-8067US	—OT elevated	0.23% (14th)	—	12.7.8	2026-09-29	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-415Double Free2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)25 CVEs
EUEU Vulnerability Database (ENISA)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan