Hitachi Energy RTU500 Product
Plan PatchCVSS 8.8ICS-CERT ICSA-26-293-05Sep 1, 2026
Hitachi EnergyEnergy
Attack path
Attack VectorNetwork
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
What this means
What could happen
Could cause the device to crash, resulting in denial of service
Who's at risk
Organizations in energy using Hitachi Energy equipment
How it could be exploited
Attacker on the corporate network or internet could reach this device with basic access credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.9%
Public Proof-of-Concept (PoC) on GitHub (2 repositories)
Affected products (1)
ProductAffected VersionsFix Status
RTU500 series CMU Firmware≥ 13.5.1, ≤ 13.5.4≥ 13.6.1, ≤ 13.6.3≥ 13.7.1, ≤ 13.7.8≥ 13.8.1, ≤ 13.8.2≥ 12.7.1, ≤ 12.7.7Fix available
Remediation & Mitigation
0/5
Do now — compensating controls
0/1WORKAROUNDFollow general mitigation factors/workarounds
Schedule — requires maintenance window
0/4Patching may require device reboot — plan for process interruption
UPGRADEUpdate to CMU Firmware version 13.9.1
UPGRADEUpdate to CMU Firmware version 13.9.1 or 13.7.9 (when available)
UPGRADEUpdate to CMU Firmware version 13.9.1 or 13.8.3*
UPGRADEUpdate to CMU Firmware version 12.7.8 OR
CVEs (9)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/17bc34ce-e5fe-497d-b4f1-a6330f3bb76fGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.