Description
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | RTU500 series CMU firmware | 12.0.1 – ≤ 12.0.14, 12.2.1 – ≤ 12.2.11, 12.4.1 – ≤ 12.4.11, 12.6.1 – ≤ 12.6.9, 12.7.1 – ≤ 12.7.6, 13.2.1 – ≤ 13.2.6, 13.4.1 – ≤ 13.4.4, 13.5.1 – ≤ 13.5.3 | — |
Advisories 2
- WID-SEC-2024-0725 Hitachi Energy RTU500: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
- ICSA-24-116-01 Hitachi Energy RTU500 Series CISA ICS & IT advisories · Apr 25, 2024