Hitachi Energy RTU500

• CVE-2025-1445 High 7.5 A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations 0.3%
• CVE-2024-12169 Medium 6.5 A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU 0.4%
• CVE-2024-11499 Medium 4.9 A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if 0.3%
• CVE-2024-10037 Medium 4.4 A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket connection 0.3%
• CVE-2023-5769 Medium 5.4 A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to user input being 0.4%
• CVE-2023-5767 Medium 6.0 A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language f 0.4%
• CVE-2022-3353 Medium 5.9 IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products 1.1%