5.3
Moyenne
CVE-2026-1772 RTU500 web interface: An unprivileged user can read user management information
Description
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RTU500 series CMU Firmware | 13.8.1 | Pas de correctif indiqué |
| RTU500 series CMU Firmware 13.7 | 13.7.1 → 13.7.7 | Pas de correctif indiqué |
| RTU500 series CMU Firmware 13.6 | 13.6.1 → 13.6.2 | Pas de correctif indiqué |
| RTU500 series CMU Firmware 13.5 | 13.5.1 → 13.5.4 | Pas de correctif indiqué |
| RTU500 series CMU Firmware 12.7 | 12.7.1 → 12.7.7 | Pas de correctif indiqué |
Autres CVE de RTU500 series CMU Firmware
Les 13 CVE de RTU500 series CMU Firmware →
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an…
6.5
Moyenne
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions…
9.1
Critique
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions…
9.1
Critique
CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a…
5.9
Moyenne