Approved changes feed: RSS · Atom

cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHitachienergy (2cd248c7-aee9-59a5-80aa-6fb18cc538ff)
ProductRtu530 Firmware (c94f9dd6-2cf1-585b-9a72-788051ad3825)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1773 vulnerable 2026-06-08 07:49:09.584856 Details available
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.
Published: 2026-02-24T13:13:17.990Z
Updated: 2026-05-27T14:50:01.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1772 vulnerable 2026-06-08 07:49:09.575106 Details available
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Published: 2026-02-24T13:03:23.592Z
Updated: 2026-02-28T02:19:01.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5769 vulnerable 2026-06-08 06:19:44.692635 Details available
MEDIUM (5.4)
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to user input being improperly sanitized.
Published: 2023-12-14T16:19:51.846Z
Updated: 2024-08-02T08:07:32.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5768 vulnerable 2026-06-08 06:19:44.691584 Details available
MEDIUM (5.9)
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length information of APDU or delayed reception of data octets. Only communication link of affected HCI IEC 60870-5-104 is blocked. If attack sequence stops the communication to the previously attacked link gets normal again.
Published: 2023-12-04T14:33:47.898Z
Updated: 2024-08-02T08:07:32.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5767 vulnerable 2026-06-08 06:19:44.686454 Details available
MEDIUM (6)
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized.
Published: 2023-12-04T14:30:23.253Z
Updated: 2024-08-02T08:07:32.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2081 vulnerable 2026-06-08 05:42:50.226031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.