Advisories · Technology

Hitachi Energy RTU500 series CMU firmware.

Every CVE that names Hitachi Energy RTU500 series CMU firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8067 CVE record

CVSS 6.5 Medium

Missing authorization in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-8066 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Path traversal in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Path traversal
Not analysed yet 29 Sept 2026
CVE-2026-8065 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Authentication bypass
Not analysed yet 29 Sept 2026
CVE-2026-17539 CVE record

CVSS 5.9 Medium

NULL pointer dereference in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Memory corruption
Not analysed yet 3 Sept 2026
CVE-2026-8479 CVE record

CVSS 6.9 Medium

NULL pointer dereference in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Memory corruption
Not analysed yet 26 May 2026
CVE-2026-1773 CVE record

CVSS 8.7 High

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.
- Hitachi Energy RTU500 series CMU firmware
- CWE-184
Not analysed yet 24 Feb 2026
CVE-2026-1772 CVE record

CVSS 5.3 Medium

RTU500 web interface: An unprivileged user can read user management information.
- Hitachi Energy RTU500 series CMU firmware
- CWE-280
Not analysed yet 24 Feb 2026
CVE-2024-2617 CVE record

CVSS 7.2 High

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500.
- Hitachi Energy RTU500 series CMU firmware
- CWE-358
Not analysed yet 30 Apr 2024
CVE-2024-1532 CVE record

CVSS 6.8 Medium

Unrestricted file upload in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Unrestricted file upload
Not analysed yet 27 Mar 2024
CVE-2024-1531 CVE record

CVSS 8.2 High

Unrestricted file upload in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Unrestricted file upload
Not analysed yet 27 Mar 2024
CVE-2022-2081 CVE record

CVSS 7.5 High

Out-of-bounds write in Hitachi Energy RTU500 series CMU firmware
- Hitachi Energy RTU500 series CMU firmware
- Memory corruption
Not analysed yet 4 Jan 2024
CVE-2023-6711 CVE record

CVSS 5.9 Medium

Buffer overflow in Hitachi Energy RTU500 series CMU Firmware
- Hitachi Energy RTU500 series CMU Firmware
- Memory corruption
Not analysed yet 19 Dec 2023
CVE-2022-28613 CVE record

CVSS 7.5 High

Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series
- Hitachi Energy RTU500 series CMU Firmware
- CWE-1284
Not analysed yet 2 May 2022