5.9
Medium
CVE-2023-6711 Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions…
Description
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an RTU500 CMU.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RTU500 series CMU Firmware | 13.5.1 | No fix stated |
| RTU500 series CMU Firmware 13.4 | 13.4.1 → 13.4.3 | No fix stated |
| RTU500 series CMU Firmware 13.2 | 13.2.1 → 13.2.6 | No fix stated |
| RTU500 series CMU Firmware 12.7 | 12.7.1 → 12.7.6 | No fix stated |
| RTU500 series CMU Firmware 12.6 | 12.6.1 → 12.6.9 | No fix stated |
| RTU500 series CMU Firmware 12.4 | 12.4.1 → 12.4.11 | No fix stated |
| RTU500 series CMU Firmware 12.2 | 12.2.1 → 12.2.11 | No fix stated |
| RTU500 series CMU Firmware 12.0 | 12.0.1 → 12.0.14 | No fix stated |
Other CVEs of RTU500 series CMU Firmware
The 13 CVEs of RTU500 series CMU Firmware →
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an…
6.5
Medium
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions…
9.1
Critical
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions…
9.1
Critical
CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a…
5.9
Medium