Vendor
Hitachi Energy
132 known vulnerabilities in products by Hitachi Energy, 1 of them actively exploited (CISA KEV).
Key figures
132
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
20
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEValso in 30 other products | 7.8 | |
| Critical | CVE-2010-2965 | Wind River VxWorks: security vulnerability | 9.8 | |
| High | CVE-2025-59375 | libexpat Project libexpat: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 | |
| Critical | CVE-2026-9079 | stale proxy password leak | 9.8 | |
| Critical | CVE-2026-8066 | Hitachi Energy RTU500 series CMU firmware: Relative Path Traversal | 9.1 | |
| Critical | CVE-2026-8065 | Hitachi Energy RTU500 series CMU firmware: Missing Authentication for Critical Function | 9.1 | |
| High | CVE-2024-41153 | Hitachi Energy TRO600: OS Command Injection | 7.2 | |
| High | CVE-2025-1036 | Hitachi Energy TropOS 4th Gen: OS Command Injection | — | |
| Critical | CVE-2026-6653 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling | 9.8 | |
| High | CVE-2021-35534 | Insufficient Security Control Vulnerability | 7.2 | |
| Not rated | CVE-2014-9195 | Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function | — | |
| High | CVE-2026-6732 | Libxml2: libxml2: denial of service via crafted xsd-validated document | 7.5 | |
| Critical | CVE-2024-2013 | Hitachi Energy FOXMAN-UN: Authentication Bypass Using an Alternate Path or Channel | 10.0 | |
| Critical | CVE-2022-3682 | SDM600 file permission validation | 9.9 | |
| High | CVE-2026-106087 | Hitachi Energy TRO600 Series Firmware: Missing Authentication for Critical Function | — | |
| Critical | CVE-2024-3980 | Hitachi Energy MicroSCADA X SYS600: Path Traversal | 9.9 | |
| High | CVE-2026-7395 | Hitachi Energy Asset Suite: Missing Authentication for Critical Function | — | |
| High | CVE-2021-40334 | SSH activation problem in the proprietary management protocol (port TCP 5558) | 8.6 | |
| High | CVE-2026-28388 | NULL Pointer Dereference When Processing a Delta CRL | 5.9 | |
| High | CVE-2026-1773 | Hitachi Energy RTU500 series CMU firmware: Incomplete List of Disallowed Inputs | 7.5 | |
| Critical | CVE-2024-4872 | Hitachi Energy MicroSCADA X SYS600: Improper Neutralization of Special Elements in Data Query Logic | 9.9 | |
| Critical | CVE-2024-2012 | Hitachi Energy FOXMAN-UN: Authentication Bypass Using an Alternate Path or Channel | 9.1 | |
| High | CVE-2022-28613 | Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series | 7.5 | |
| Critical | CVE-2022-3686 | SDM600 API permission check | 4.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- Flaws in Linux Kernel and Android Exploited, Added to CISA KEVsans-newsbites-mail,
Products
| Rtu500 | 24 | 0 |
| Foxman-un | 15 | 0 |
| Unem | 15 | 0 |
| Microscada X Sys600 | 14 | 0 |
| Rtu500 Series Cmu Firmware | 13 | 0 |
| Sdm600 | 7 | 0 |
| Microscada Sys600 | 6 | 0 |
| Asset Suite | 5 | 0 |
| Microscada Pro Sys600 | 5 | 0 |
| Fox61x | 4 | 0 |
| Rtu500 Series | 4 | 0 |
| Esoms | 3 | 0 |
| Msm | 3 | 0 |
| Trmtracker | 3 | 0 |
| Tropos 4th Gen | 3 | 0 |
| Txpert Hub Coretec 4 Version | 3 | 0 |