As cited
Copy frozen at (site build).
vulnerabilities
Hitachi Energy RTU500
Hitachi Energy published a cybersecurity advisory for end-of-life RTU500 industrial control system firmware versions 11.x and prior, which are affected by six vulnerabilities reported by Dragos. The flaws include authentication bypass, directory traversal, and improper authorization issues that allow unauthenticated attackers to upload firmware, modify files, or execute arbitrary commands. Hitachi Energy recommends upgrading to supported versions 12.7.8, 13.9.1, or later, and implementing defense-in-depth security measures, as these legacy versions are no longer maintained with security updates.
Why it matters: Organizations operating energy infrastructure with RTU500 CMU firmware version 11.x or earlier face critical remote exploitation risks; immediate firmware upgrade to 12.7.8 or 13.9.1 is required to mitigate unauthenticated code execution and device compromise.
- Source published
- First seen by Cybersecurity Tracker