Product by Hitachi Energy
Rtu500
24 known vulnerabilities in Rtu500 (Hitachi Energy), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2010-2965 | Wind River VxWorks: security vulnerability | 9.8 | |
| High | CVE-2025-59375 | libexpat Project libexpat: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 | |
| Critical | CVE-2026-9079 | stale proxy password leak | 9.8 | |
| Critical | CVE-2026-8066 | Hitachi Energy RTU500 series CMU firmware: Relative Path Traversal | 9.1 | |
| Critical | CVE-2026-8065 | Hitachi Energy RTU500 series CMU firmware: Missing Authentication for Critical Function | 9.1 | |
| Critical | CVE-2026-6653 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling | 9.8 | |
| Not rated | CVE-2014-9195 | Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function | — | |
| High | CVE-2026-6732 | Libxml2: libxml2: denial of service via crafted xsd-validated document | 7.5 | |
| High | CVE-2026-28388 | NULL Pointer Dereference When Processing a Delta CRL | 5.9 | |
| Medium | CVE-2026-11856 | cross-origin Digest auth state leak | 5.3 | |
| High | CVE-2026-8932 | incomplete mTLS config matching in conn reuse | 7.5 | |
| High | CVE-2022-3353 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products | 5.9 | |
| Medium | CVE-2026-8067 | Hitachi Energy RTU500 series CMU firmware: Missing Authorization | 6.5 | |
| Medium | CVE-2026-17539 | Hitachi Energy RTU500 series CMU firmware: NULL Pointer Dereference | 5.9 | |
| High | CVE-2024-12169 | Hitachi Energy RTU500: security vulnerability | 6.5 | |
| Medium | CVE-2026-8927 | env-set cross-proxy Digest auth state leak | 5.3 | |
| High | CVE-2026-6276 | stale custom cookie host causes cookie leak | 7.5 | |
| High | CVE-2025-1445 | Hitachi Energy RTU500: Missing Synchronization | 7.5 | |
| High | CVE-2023-46143 | Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC | 7.5 | |
| Medium | CVE-2024-11499 | Hitachi Energy RTU500: NULL Pointer Dereference | 4.9 | |
| Medium | CVE-2024-10037 | Hitachi Energy RTU500: NULL Pointer Dereference | 4.4 | |
| Medium | CVE-2023-5767 | Hitachi Energy RTU500: Cross-Site Scripting (XSS) | 6.0 | |
| Medium | CVE-2023-5769 | Hitachi Energy RTU500: Cross-Site Scripting (XSS) | 5.4 |