500 matches found
Hitachi Energy RTU500 series CMU Authentication Bypass
The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability exists in the file upload functionality of the Hitachi Energy RTU500 . This flaw allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Successful exploitation may lead to the unauthorized modification of device data...
EUVD-2026-88669
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
EUVD-2026-88666
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8065
The Hitachi Energy RTU500 contains an authentication bypass vulnerability in its firmware update endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to upload arbitrary firmware . Successful exploitation allows the attacker to modify device functionality or c...
CVE-2026-8065: Missing Authentication for Critical Function
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
PT-2026-102474
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066: Relative Path Traversal
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
PT-2026-102473
Name of the Vulnerable Software and Affected Versions Hitachi Energy RTU500 versions prior to 2026.2.14 Description An authentication bypass exists in the firmware update endpoint, allowing an unauthenticated attacker to upload arbitrary firmware via a crafted POST request. This could lead to...
Hitachi Energy RTU500
SUMMARY Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the...
Hitachi Energy SOI
SUMMARY Hitachi Energy is aware of RCE Remote Code Execution vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and availability of the product...
Hitachi Energy REB500
SUMMARY Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service DoS attack on the product. Please refer to the Recommended Immediate Actions for information...