Skip to content
OpenAdvisories
Medium ICSA-25-128-02 3 CVEs

Hitachi Energy RTU500 series

Published Nov 28, 2023 · Updated Dec 18, 2024 · Revision 6

Vendor: Hitachi Energy Product: RTU500 series Product

Summary

Hitachi Energy is aware of the vulnerabilities CVE-2023-5767, CVE-2023-5768 and CVE-2023-5769 in the Web server and HCI IEC 60870-5-104 component, that affects the RTU500 versions that are listed below. An at-
tacker successfully exploiting these vulnerabilities could perform cross-site scripting on web server or denial of service on HCI IEC 60870-5-104. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.

Vulnerabilities 3

Revision history

  1. #6

    Updated fixed versions 12.4.12 and 12.0.15 under “Recommended Actions”

  2. #5

    Updated fixed versions 12.6.10 and 12.2.12 for 12.6.x and 12.2.x series respectively under “Recommended Actions”

  3. #4

    Updated fixed version 12.7.7 for 12.7.x series under “Recommended Actions”

  4. #3

    Updated fixed versions 13.2.7 and 13.4.4 for 13.2.x and 13.4.x series respectively under “Recommended Actions”

  5. #2

    Corrected CVE IDs

  6. #1

    Initial version.

References