255 matches found
The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU lies in the lack of authentication for a critical function, allowing attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
Exploit for CVE-2026-8065
CVE-2026-8065 — Hitachi Energy RTU500 unauthenticated firmware...
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
EUVD-2026-88686
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
CVE-2026-8067
The RTU500 web application contains an improper authorization vulnerability that allows an authenticated user to trigger a device reboot via the reset endpoint . Exploitation of this flaw can lead to temporary device unavailability and disruption of intended operations. No specific patch versions...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
EUVD-2026-88669
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability exists in the file upload functionality of the Hitachi Energy RTU500 . This flaw allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Successful exploitation may lead to the unauthorized modification of device data...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8065
The Hitachi Energy RTU500 contains an authentication bypass vulnerability in its firmware update endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to upload arbitrary firmware . Successful exploitation allows the attacker to modify device functionality or c...
EUVD-2026-88666
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...
PT-2026-102474
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
Hitachi Energy RTU500
SUMMARY Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the...