Skip to contentHitachi Energy vulnerabilities
Newest
- hitachi energy tro600 series firmwareTRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit...CVE-2026-1060878.7 High
- hitachi energy tro600 series firmwareTRO600 contains a vulnerability that allows an authenticated attacker to bypass network access...CVE-2026-107567.7 High
- hitachi energy coretec 4, coretec 5 +1 moreAn OS command vulnerability exists in CoreTec product that allows authenticated users with...CVE-2026-131627.7 High
- hitachi energy asset suiteAsset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet,...CVE-2026-117965.1 Medium
- hitachi energy asset suiteAsset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used...CVE-2026-73958.5 High
- hitachi energy rtu500 series cmu firmwareAn improper authorization vulnerability in the RTU500’s web application allows an authenticated...CVE-2026-80676.5 Medium
- hitachi energy rtu500 series cmu firmwareA directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500...CVE-2026-80669.1 Critical
- hitachi energy rtu500 series cmu firmwareAn authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500...CVE-2026-8065Public exploit9.1 Critical
- hitachi energy rtu500 series cmu firmwareRTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short...CVE-2026-175395.9 Medium
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreA vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering...CVE-2026-98548.5 High
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreA vulnerability exists in SYS600 which allows any user authenticated to the operating system of...CVE-2026-98538.5 High
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreA CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify...CVE-2026-98524.6 Medium
- hitachi energy promod vPROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the...CVE-2026-107637.0 High
- hitachi energy rtu500 series cmu firmwareIEC 60870-5-104 used in bidirectional mode is vulnerable
for a NULL pointer dereferencing, if a...CVE-2026-84796.9 Medium
- hitachi energy mach hidrawA heap-based buffer overflow vulnerability exists in XML
parser functionality in the HiDraw. An...CVE-2026-73104.4 Medium
- hitachi energy relion reb500, hitachienergy reb500 firmware +1 moreA vulnerability exists in REB500 for an authenticated user with low-level privileges to access...CVE-2026-24607.6 High
- hitachi energy relion reb500, hitachienergy reb500 firmware +1 moreA vulnerability exists in REB500 for an authenticated user with Installer role to access and...CVE-2026-24597.4 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreIEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame....CVE-2026-17738.7 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreRTU500 web interface: An unprivileged user can read user management information. The information...CVE-2026-17725.3 Medium
- hitachi energy suprosUse of default credentials vulnerability in Hitachi Energy SuprOS productCVE-2025-77408.8 High
- hitachi energy tropos 4th genThe “Diagnostics Tools” page of the web-based configuration utility does not properly validate...CVE-2025-10387.5 High
- hitachi energy tropos 4th genBy making minor configuration changes to the TropOS 4th Gen device, an authenticated user with...CVE-2025-10377.5 High
- hitachi energy tropos 4th genCommand injection vulnerability exists in the “Logging” page of the web-based configuration...CVE-2025-10368.7 High
- hitachi energy asset suiteA vulnerability exists in Asset Suite for an authenticated user to manipulate the content of...CVE-2025-102176.0 Medium
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate...CVE-2025-392057.1 High
- hitachi energy microscada x sys600A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering...CVE-2025-392048.5 High
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8...CVE-2025-392037.1 High
- hitachi energy microscada x sys600A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An...CVE-2025-392028.3 High
- hitachi energy microscada x sys600A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local...CVE-2025-392016.9 Medium
- hitachi energy relion 670/650 and sam600-ioA denial-of-service vulnerability due to improper prioritization of network traffic over...CVE-2025-24038.7 High
- hitachi energy relion 670/650 and sam600-ioAn authenticated user with file access privilege via FTP access can cause the Relion 670/650 and...CVE-2025-17187.1 High
- hitachi energy asset suiteA vulnerability exists in the SOAP Web services of the Asset
Suite versions listed below. If...CVE-2025-25009.1 Critical
- hitachi energy asset suiteA vulnerability exists in the media upload component of the Asset
Suite versions listed below....CVE-2025-14846.3 Medium
- hitachi energy trmtrackerThe TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an...CVE-2025-276316.5 Medium
- hitachi energy trmtrackerThe TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The...CVE-2025-276336.1 Medium
- hitachi energy rtu500A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the...CVE-2025-14458.7 High
- hitachi energy trmtrackerA Host Header Injection vulnerability in TRMTracker application may allow an attacker by...CVE-2025-276326.1 Medium
- hitachi energy rtu500A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850...CVE-2024-121698.7 High
- hitachi energy rtu500A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an...CVE-2024-114996.9 Medium
- hitachi energy rtu500A vulnerability exists in the RTU500 web server component that can cause a denial of service to...CVE-2024-100375.9 Medium
- hitachi energy nsd570 teleprotection equipmentA vulnerability exists in NSD570 that allows any authenticated
user to access all device logs...CVE-2024-99294.3 Medium
- hitachi energy nsd570 teleprotection equipment, hitachienergy nsd570 firmware +1 moreA vulnerability exists in NSD570 login panel that does not restrict excessive authentication...CVE-2024-99285.3 Medium
- hitachi energy tro600, hitachienergy tro610 firmware, tro620 firmware +1 more +3 moreProfile files from TRO600 series radios are extracted in plain-text
and encrypted file formats....CVE-2024-411562.7 Low
- hitachi energy tro600, hitachienergy tro610 firmware, tro620 firmware +1 more +3 moreCommand injection vulnerability in the Edge Computing UI for the
TRO600 series radios that allows...CVE-2024-411537.2 High
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreAn HTTP parameter may contain a URL value and could cause
the web application to redirect the...CVE-2024-79414.3 Medium
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreThe product exposes a service that is intended for local only to
all network interfaces without...CVE-2024-79408.3 High
- hitachi microscada x sys600, hitachi energy microscada sys600 +1 moreAn attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the...CVE-2024-39828.2 High
- hitachi energy microscada pro sys600, microscada x sys600, hitachienergy microscada sys600 +2 moreThe product allows user input to control or influence paths or file
names that are used in...CVE-2024-39809.9 Critical
- hitachi energy microscada pro sys600, microscada x sys600, hitachienergy microscada sys600 +2 moreThe product does not validate any query towards persistent
data, resulting in a risk of injection...CVE-2024-48729.9 Critical
- hitachi energy foxman-un, unem +1 moreA user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server...CVE-2024-280208.0 High
- Show olderLoading…