Vulnerabilidades de Hitachi Energy
CVEs publicadas que afetam produtos de Hitachi Energy: 11 registro(s), com severidade, exploração e correções.
RTU500 series CMU firmware 3TropOS 4th Gen 3Rtu520 Firmware 2Rtu530 Firmware 2Rtu540 Firmware 2Rtu560 Firmware 2Reb500 Firmware 2Relion REB500 2SuprOS 1PROMOD V 1MACH HiDraw 1
CVE-2026-10763
Alta · 7.0
30/06/2026
PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due…
PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.
CVE-2026-8479
Média · 6.9
CWE-476 26/05/2026
NULL Pointer Dereference em Hitachi Energy RTU500 series CMU firmware
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable
for a NULL pointer dereferencing, if a specially crafted
sequence of messages is sent for a certain time, causing
Denial of Service impact.
Product is only affected if IEC 60870-5-104 functionality in
bidirectional mode (BCI) is configured.
CVE-2026-7310
Média · 4.4
CWE-122 26/05/2026
Heap-based Buffer Overflow em Hitachi Energy MACH HiDraw
A heap-based buffer overflow vulnerability exists in XML
parser functionality in the HiDraw. An authenticated
malicious user with local access can exploit this
vulnerability using a specially crafted XML file which may
lead to memory corruption and potential arbitrary code
execution. Successful exploitation could result in
application crashes (denial of service) and compromise the
confidentiality and integrity of the affected system.
CVE-2026-2460
Alta · 8.1
CWE-267 24/02/2026
A vulnerability exists in REB500 for an authenticated user with low-level privileges to…
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.
CVE-2026-2459
Alta · 8.1
CWE-267 24/02/2026
A vulnerability exists in REB500 for an authenticated user with Installer role to access…
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
CVE-2026-1773
Alta · 7.5
CWE-184 24/02/2026
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of…
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.
CVE-2026-1772
Média · 5.3
CWE-280 24/02/2026
RTU500 web interface: An unprivileged user can read user management information. The…
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
CVE-2025-7740
Alta · 8.8
CWE-1392 28/01/2026
Use of default credentials vulnerability in Hitachi Energy SuprOS product
Default credentials vulnerability exists in SuprOS
product. If exploited, this could allow an authenticated
local attacker to use an admin account created during
product deployment.
CVE-2025-1038
Alta · 7.5
CWE-78 28/10/2025
OS Command Injection em Hitachi Energy TropOS 4th Gen
The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high privileges to inject commands into the command shell of the TropOS 4th Gen device. The injected commands can be exploited to execute several set-uid (SUID) applications to ultimately gain root access to the TropOS device.
CVE-2025-1037
Alta · 7.5
CWE-269 28/10/2025
Improper Privilege Management em Hitachi Energy TropOS 4th Gen
By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands can enable access via secure shell (SSH) to an unrestricted root shell. This is possible through abuse of a particular set of scripts and executables that allow for certain commands to be run as root from an unprivileged context.
CVE-2025-1036
Alta · 8.7
CWE-78 28/10/2025
OS Command Injection em Hitachi Energy TropOS 4th Gen
Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device.