Summary
Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
Vulnerabilities 1
-
High 7.2
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if sec…
Revision history
-
#6
Update B - Updated vulnerability description
-
#5
Updated vulnerability description
-
#4
Update A - Fixed versions 13.5.4 and 13.7.7
-
#3
Updated fixed versions 13.5.4 and 13.7.7
-
#2
Initial Republication of Hitachi 8DBD000199.
-
#1
Initial public release.
References
-
Secure Update Bypass Vulnerability in Hitachi Energy RTU500 series Product
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000199&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-25-023-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b