As cited
Copy frozen at (site build).
vulnerabilities
Hitachi Energy RTU500 Product
Hitachi Energy disclosed multiple vulnerabilities affecting RTU500 series CMU Firmware versions 12.7.1 through 13.8.2, including null pointer dereferences, type confusion, use-after-free, and authentication bypass flaws in bundled OpenSSL and libcurl libraries. The vulnerabilities enable denial of service, authentication bypass, and credential leakage in the industrial control system product used for energy grid communication. Firmware updates to version 13.9.1 or 12.7.8 are available, with patches for intermediate versions in progress.
Why it matters: Operators of Hitachi Energy RTU500 devices in energy utilities and critical infrastructure must apply firmware updates immediately to prevent denial of service attacks on IEC 60870-5-104 communication, credential theft via stale HTTP headers and proxy authentication leaks, and authentication bypass through mishandled certificate validation.
- Source published
- First seen by Cybersecurity Tracker