Rtu560 Firmware Security Vulnerabilities - 2023

CVE-2023-5767

A vulnerability exists in the webserver that affects theRTU500 series product versions listed below. A maliciousactor could perform cross-site scripting on the webserverdue to an RDT language file being improperly sanitized.

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.Incomplete or wrong received APDU frame layout maycause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layerwith wrong length information...

CVE-2023-5769

A vulnerability exists in the webserver that affects theRTU500 series product versions listed below. A maliciousactor could perform cross-site scripting on the webserverdue to user input being improperly sanitized.