Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Hitachi Energy Component: Rtu500 Firmware Clear all filters
TI-2023-06138 CVE-2023-6711 · GHSA-x25m-g22v-6hgf

Buffer overflow in Hitachi Energy RTU500 series CMU Firmware

Priority LOW 34

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00669 Published 2023-12-19 No fix listed CWE-120
TI-2022-04211 CVE-2022-4608 · GHSA-5568-g9wp-2cv7

Out-of-bounds write in Hitachi Energy RTU500 series

Priority MEDIUM 40

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2023-07-26 Fixed in RTU500 series CMU Firmware version 13.3.3, RTU500 series CMU Firmware version 13.4.1 CWE-787
TI-2022-02312 CVE-2022-2502 · GHSA-45rh-q5fv-wf42

Improper input validation in Hitachi Energy RTU500 series

Priority MEDIUM 40

A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00645 Published 2023-07-26 Fixed in RTU500 series CMU Firmware version 13.3.3, RTU500 series CMU Firmware version 13.4.1 CWE-20
TI-2021-14264 CVE-2021-35533 · GHSA-wv2v-prmm-j684

Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series

Priority LOW 35

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0095 Published 2021-11-26 No fix listed CWE-20
TI-2021-08743 CVE-2021-27196 · GHSA-xc3v-wx52-jg7g

Specially Crafted IEC 61850 Protocol Sequence Vulnerability

Priority LOW 36

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an atta…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01575 Published 2021-06-14 No fix listed CWE-20