---
title: "Hitachi Energy Asset Suite vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/hitachi-energy/asset-suite
type: product
description: "Hitachi Energy Asset Suite has 8 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2026-09-29
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Hitachi Energy Asset Suite vulnerabilities

Vendor: [Hitachi Energy](https://radicalnotion.ai/vendor/hitachi-energy)

- **Published CVEs:** 8
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 3
- **Average CVSS:** 7.0
- **First CVE:** 2020-02-17
- **Latest CVE:** 2026-09-29

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 1 |
| High | 3 |
| Medium | 4 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 2 |
| [CWE-306](https://radicalnotion.ai/cwe/cwe-306) | Missing Authentication for Critical Function | 2 |
| [CWE-117](https://radicalnotion.ai/cwe/cwe-117) | Improper Output Neutralization for Logs | 1 |
| [CWE-184](https://radicalnotion.ai/cwe/cwe-184) | Incomplete List of Disallowed Inputs | 1 |
| [CWE-256](https://radicalnotion.ai/cwe/cwe-256) | Plaintext Storage of a Password | 1 |
| [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2020 | 1 |
| 2021 | 0 |
| 2022 | 0 |
| 2023 | 1 |
| 2024 | 1 |
| 2025 | 3 |
| 2026 | 2 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| 9.6.4.4 | exact | 1 |
| 9.7 | exact | 1 |
| 9.6.0 \<= v \<= 9.9.0 | range | 2 |
| \<= 9.6.3.11.1 | range | 1 |
| \>= 9.6.4.4 | range | 1 |
| \>= 9.6.4.5 | range | 1 |
| 9.0 \<= v \<= 9.8 | range | 1 |
| 9.0.0 \<= v \<= 9.3.0 | range | 1 |
| 9.4 \<= v \< 9.4.2.6 | range | 1 |
| 9.5.0 \<= v \< 9.5.3.2 | range | 1 |
| 9.6.0 | range | 1 |
| 9.6.3.0 \<= v \< 9.6.3.13 | range | 1 |
| 9.6.4 | range | 1 |
| 9.6.4.0 \<= v \< 9.6.4.1 | range | 1 |
| 9.4.2.6 | patched | 1 |
| 9.5.3.2 | patched | 1 |
| 9.6.3.13 | patched | 1 |
| 9.6.4.1 | patched | 1 |
| 9.6.4.5 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-11796 | - | medium | 5.1 | No | No | No |
| CVE-2026-7395 | - | high | 8.5 | No | No | No |
| CVE-2025-10217 | - | medium | 6.0 | No | No | No |
| CVE-2025-2500 | - | critical | 9.1 | No | No | No |
| CVE-2025-1484 | - | medium | 6.3 | No | No | Yes |
| CVE-2024-2244 | - | medium | 5.3 | No | No | Yes |
| CVE-2023-4816 | - | high | 8.8 | No | No | No |
| CVE-2019-18998 | Asset Suite Direct Object Reference Access | high | 7.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does Hitachi Energy Asset Suite have?

Hitachi Energy Asset Suite has 8 published CVE records since 2020.

### How many Hitachi Energy Asset Suite CVEs are in CISA KEV?

None of Hitachi Energy Asset Suite's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Hitachi Energy Asset Suite vulnerabilities?

No Hitachi Energy Asset Suite CVEs currently have a tracked public exploit in this dataset.

### Which versions of Hitachi Energy Asset Suite are affected?

19 distinct Hitachi Energy Asset Suite versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Hitachi Energy Asset Suite CVEs?

Hitachi Energy Asset Suite's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-306 (Missing Authentication for Critical Function), CWE-117 (Improper Output Neutralization for Logs), CWE-184 (Incomplete List of Disallowed Inputs).

### How many critical Hitachi Energy Asset Suite vulnerabilities are there?

Hitachi Energy Asset Suite has 1 critical and 3 high-severity CVEs.

### What is the average severity of Hitachi Energy Asset Suite CVEs?

The average CVSS base score across Hitachi Energy Asset Suite's scored CVEs is 7.0.

## Other products from this vendor

- [MicroSCADA X SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600) (20 CVEs)
- [eSOMS](https://radicalnotion.ai/vendor/hitachi-energy/esoms) (19 CVEs)
- [FOXMAN-UN](https://radicalnotion.ai/vendor/hitachi-energy/foxman-un) (15 CVEs)
- [UNEM](https://radicalnotion.ai/vendor/hitachi-energy/unem) (15 CVEs)
- [RTU500](https://radicalnotion.ai/vendor/hitachi-energy/rtu500) (13 CVEs)
- [RTU500 series CMU firmware](https://radicalnotion.ai/vendor/hitachi-energy/rtu500-series-cmu-firmware) (13 CVEs)
- [MicroSCADA SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600) (8 CVEs)
- [relion 670](https://radicalnotion.ai/vendor/hitachi-energy/relion-670) (8 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hitachi-energy/asset-suite). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.
