cbcvebase.

Hitachienergy Rtu520 Firmware vulnerabilities

6 known vulnerabilities affecting hitachienergy/rtu520_firmware.

Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM4

Vulnerabilities

Page 1 of 1
CVE-2022-2081P3HIGHCVSS 7.5≥ 12.0.1, ≤ 12.0.13≥ 12.2.1, ≤ 12.2.11+5 more2024-01-04
CVE-2022-2081 [HIGH] CWE-787 CVE-2022-2081: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood co
nvd
CVE-2026-1773P3HIGHCVSS 7.5≥ 12.7.1, ≤ 12.7.7≥ 13.5.1, ≤ 13.5.4+3 more2026-02-24
CVE-2026-1773 [HIGH] CWE-184 CVE-2026-1773: IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.
nvd
CVE-2026-1772P4MEDIUMCVSS 5.3≥ 12.7.1, ≤ 12.7.7≥ 13.5.1, ≤ 13.5.4+3 more2026-02-24
CVE-2026-1772 [MEDIUM] CWE-280 CVE-2026-1772: RTU500 web interface: An unprivileged user can read user management information. The information can RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
nvd
CVE-2023-5768P4MEDIUMCVSS 6.1≥ 12.0.1, ≤ 12.0.14≥ 12.2.1, ≤ 12.2.11+5 more2023-12-04
CVE-2023-5768 [MEDIUM] CWE-79 CVE-2023-5768: A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions li A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length information of APDU or delayed reception of data octets. Only
nvd
CVE-2023-5769P4MEDIUMCVSS 6.1≥ 12.0.1, ≤ 12.0.14≥ 12.2.1, ≤ 12.2.11+5 more2023-12-14
CVE-2023-5769 [MEDIUM] CWE-79 CVE-2023-5769: A vulnerability exists in the webserver that affects the RTU500 series product versions listed bel A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to user input being improperly sanitized.
nvd
CVE-2023-5767P4MEDIUMCVSS 6.1≥ 12.0.1, ≤ 12.0.14≥ 12.2.1, ≤ 12.2.11+5 more2023-12-04
CVE-2023-5767 [MEDIUM] CWE-79 CVE-2023-5767: A vulnerability exists in the webserver that affects the RTU500 series product versions listed bel A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized.
nvd
Hitachienergy Rtu520 Firmware vulnerabilities | cvebase