Medium WID-SEC-2023-3055 3 CVEs

Hitachi Energy RTU500: Mehrere Schwachstellen

Published Dec 4, 2023 · Updated Dec 4, 2023 · de-DE

Vendor: Hitachi Energy Product: RTU500 Product: RTU500 < 12.0.15 Product: RTU500 < 12.2.12 Product: RTU500 < 12.4.12 Product: RTU500 < 12.6.10 Product: RTU500 < 12.7.7 Product: RTU500 < 13.2.7 Product: RTU500 < 13.4.4 Product: RTU500 < 13.5.1

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder einen Denial-of-Service-Zustand zu verursachen.

Product

Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.

Vulnerabilities 3

Medium 6.0

CVE-2023-5767

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor…

Hitachi Energy RTU500 ICS / OT

Dec 4, 2023
Medium 5.9

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incompl…

Hitachi Energy RTU500 series ICS / OT

Dec 4, 2023
Medium 5.4

CVE-2023-5769

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor…

Hitachi Energy RTU500 ICS / OT

Dec 14, 2023

Revision history

2023-12-04 #1
Initiale Fassung

References

GitHub Advisory Database vom 2023-12-04
https://github.com/advisories/GHSA-gv34-7cg2-7vfg
GitHub Advisory Database vom 2023-12-04
https://github.com/advisories/GHSA-wr6r-5f4w-8399
Hitachi Cybersecurity Advisory vom 2023-12-04
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=true