# Hitachi Energy RTU500 series CMU firmware.

Every CVE that names Hitachi Energy RTU500 series CMU firmware among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Missing authorization in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-8067.md)
  `CVE-2026-8067` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Broken access control
- [Path traversal in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-8066.md)
  `CVE-2026-8066` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Path traversal
- [Missing authentication in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-8065.md)
  `CVE-2026-8065` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [NULL pointer dereference in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-17539.md)
  `CVE-2026-17539` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [NULL pointer dereference in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-8479.md)
  `CVE-2026-8479` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption
- [IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.](https://agentprime.io/advisories/CVE-2026-1773.md)
  `CVE-2026-1773` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 8.7 High · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-184
- [RTU500 web interface: An unprivileged user can read user management information.](https://agentprime.io/advisories/CVE-2026-1772.md)
  `CVE-2026-1772` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 5.3 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-280
- [A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500.](https://agentprime.io/advisories/CVE-2024-2617.md)
  `CVE-2024-2617` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 7.2 High · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-358
- [Unrestricted file upload in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2024-1532.md)
  `CVE-2024-1532` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 6.8 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Unrestricted file upload
- [Unrestricted file upload in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2024-1531.md)
  `CVE-2024-1531` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 8.2 High · Not analysed yet · Published 27 Mar 2024 · Tags: Unrestricted file upload
- [Out-of-bounds write in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2022-2081.md)
  `CVE-2022-2081` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 7.5 High · Not analysed yet · Published 4 Jan 2024 · Tags: Memory corruption
- [Buffer overflow in Hitachi Energy RTU500 series CMU Firmware](https://agentprime.io/advisories/CVE-2023-6711.md)
  `CVE-2023-6711` · CVE record: Hitachi Energy RTU500 series CMU Firmware · CVSS 5.9 Medium · Not analysed yet · Published 19 Dec 2023 · Tags: Memory corruption
- [Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series](https://agentprime.io/advisories/CVE-2022-28613.md)
  `CVE-2022-28613` · CVE record: Hitachi Energy RTU500 series CMU Firmware · CVSS 7.5 High · Not analysed yet · Published 2 May 2022 · Tags: CWE-1284

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=hitachi-energy-rtu500-series-cmu-firmware>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/hitachi-energy-rtu500-series-cmu-firmware/>. Everything for agents: <https://agentprime.io/llms.txt>.