Medium WID-SEC-2025-0637 4 CVEs

Hitachi Energy RTU500: Mehrere Schwachstellen ermöglichen Denial of Service

Published Mar 25, 2025 · Updated Mar 25, 2025 · de-DE

Vendor: Hitachi Energy Product: RTU500

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Hitachi Energy RTU500 ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.

Product

Die RTU500-Serie ist eine Produktfamilie von Remote Terminal Units, die Informationen aus dem physikalischen Stromnetz in ein SCADA-System bringt.

Vulnerabilities 4

High 7.5

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotia…

Hitachi Energy RTU500 ICS / OT

Mar 25, 2025
Medium 6.5

CVE-2024-12169

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that all…

Hitachi Energy RTU500 ICS / OT

Mar 25, 2025
Medium 4.9

CVE-2024-11499

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and aut…

Hitachi Energy RTU500 ICS / OT

Mar 25, 2025
Medium 4.4

CVE-2024-10037

A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU applicat…

Hitachi Energy RTU500 ICS / OT

Mar 25, 2025

Revision history

2025-03-25 #1
Initiale Fassung

References

Hitachi Cybersecurity Advisory vom 2025-03-25
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000207&LanguageCode=en&DocumentPartId=&Action=Launch