Skip to content
Sign in
6.9 Medium

CVE-2024-11499 A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and…

Description

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.

Affected products and versions

Product Affected versions Fixed in
RTU500 13.7.1 13.7.6
RTU500 13.6.1 13.6.2
RTU500 13.5 13.5.1 → 13.5.3 13.5.4
RTU500 13.4 13.4.1 → 13.4.4 No fix stated

Other CVEs of RTU500

The 7 CVEs of RTU500 →
CVE-2025-1445 A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if… 8.7 High CVE-2024-12169 A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that… 8.7 High CVE-2024-10037 A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU… 5.9 Medium CVE-2023-5769 A vulnerability exists in the webserver that affects the RTU500 series product versions listed below 5.4 Medium
Track this CVE