Description
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | RTU500 series CMU firmware | 12.7.1 – ≤ 12.7.7, 13.5.1 – ≤ 13.5.4, 13.6.1 – ≤ 13.6.2, 13.7.1 – ≤ 13.7.7, 13.8.1 | — |
Advisories 2
- ICSA-26-062-03 Hitachi Energy RTU500 Product (Update A) CISA ICS & IT advisories · Oct 20, 2026
- WID-SEC-2026-0503 Hitachi Energy RTU500: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 24, 2026