Read the docs
TI-2026-01456 Aliases CVE-2026-1773GHSA-q2vg-xgjr-32v3

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of…

Priority MEDIUM 44CWE-184Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00457 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hitachi EnergyRTU500 series CMU firmware12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 – 13.7.7; 13.8.1—No fix listedCNA
  • RTU500 series CMU firmware VendorHitachi Energy Affected 12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 – 13.7.7; 13.8.1 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8VulnerableHitachi Energy
cpe:2.3:o:hitachienergy:rtu540_firmware:13.8.1:*:*:*:*:*:*:*13.8.1VulnerableHitachi Energy
cpe:2.3:h:hitachienergy:rtu540:-:*:*:*:*:*:*:*not specified by NVDRunning onHitachi Energy
cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8VulnerableHitachi Energy
cpe:2.3:o:hitachienergy:rtu560_firmware:13.8.1:*:*:*:*:*:*:*13.8.1VulnerableHitachi Energy
cpe:2.3:h:hitachienergy:rtu560:-:*:*:*:*:*:*:*not specified by NVDRunning onHitachi Energy
cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8VulnerableHitachi Energy
cpe:2.3:o:hitachienergy:rtu520_firmware:13.8.1:*:*:*:*:*:*:*13.8.1VulnerableHitachi Energy
cpe:2.3:h:hitachienergy:rtu520:-:*:*:*:*:*:*:*not specified by NVDRunning onHitachi Energy
cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8VulnerableHitachi Energy
  • cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:* Versions 12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8 Vulnerable ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu540_firmware:13.8.1:*:*:*:*:*:*:* Versions 13.8.1 Vulnerable ·Hitachi Energy
  • cpe:2.3:h:hitachienergy:rtu540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:* Versions 12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8 Vulnerable ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu560_firmware:13.8.1:*:*:*:*:*:*:* Versions 13.8.1 Vulnerable ·Hitachi Energy
  • cpe:2.3:h:hitachienergy:rtu560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:* Versions 12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8 Vulnerable ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu520_firmware:13.8.1:*:*:*:*:*:*:* Versions 13.8.1 Vulnerable ·Hitachi Energy
  • cpe:2.3:h:hitachienergy:rtu520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy
  • cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:* Versions 12.7.1 – 12.7.7; 13.5.1 – 13.5.4; 13.6.1 – 13.6.2; 13.7.1 to before 13.7.8 Vulnerable ·Hitachi Energy
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hitachienergy:rtu530_firmware:13.8.1:*:*:*:*:*:*:*13.8.1VulnerableHitachi Energy
cpe:2.3:h:hitachienergy:rtu530:-:*:*:*:*:*:*:*not specified by NVDRunning onHitachi Energy
  • cpe:2.3:o:hitachienergy:rtu530_firmware:13.8.1:*:*:*:*:*:*:* Versions 13.8.1 Vulnerable ·Hitachi Energy
  • cpe:2.3:h:hitachienergy:rtu530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitachi Energy

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1773
  2. 2026-10-03 Alias added: GHSA-q2vg-xgjr-32v3

References

Advisory 1

  • TI-2022-01926 Out-of-bounds write in Hitachi Energy RTU500 series CMU firmware CVSS 3.1HIGH 7.5
  • TI-2023-05307 Cross-site scripting in Hitachi Energy RTU500 CVSS 3.1MEDIUM 6.1
  • TI-2023-05306 Cross-site scripting in Hitachi Energy RTU500 series CVSS 3.1MEDIUM 6.1
  • TI-2023-05305 Cross-site scripting in Hitachi Energy RTU500 CVSS 3.1MEDIUM 6.1
  • TI-2026-01455 RTU500 web interface: An unprivileged user can read user management information. CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences