7.5
Élevée
CVE-2022-28613 A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above
Description
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RTU500 series CMU Firmware | Versions non publiées |
Autres CVE de RTU500 series CMU Firmware
Les 13 CVE de RTU500 series CMU Firmware →
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an…
6.5
Moyenne
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions…
9.1
Critique
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions…
9.1
Critique
CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a…
5.9
Moyenne