--- title: "Hitachi Energy RTU500 vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/hitachi-energy/rtu500 type: product description: "Hitachi Energy RTU500 has 13 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2025-03-25 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Hitachi Energy RTU500 vulnerabilities Vendor: [Hitachi Energy](https://radicalnotion.ai/vendor/hitachi-energy) - **Published CVEs:** 13 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 11 - **Average CVSS:** 7.3 - **First CVE:** 2021-06-14 - **Latest CVE:** 2025-03-25 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 0 | | High | 9 | | Medium | 4 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 3 | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2 | | [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 2 | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 1 | | [CWE-120](https://radicalnotion.ai/cwe/cwe-120) | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 1 | | [CWE-820](https://radicalnotion.ai/cwe/cwe-820) | Missing Synchronization | 1 | | [CWE-1284](https://radicalnotion.ai/cwe/cwe-1284) | Improper Validation of Specified Quantity in Input | 1 | | [CWE-404](https://radicalnotion.ai/cwe/cwe-404) | Improper Resource Shutdown or Release | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2021 | 2 | | 2022 | 1 | | 2023 | 6 | | 2024 | 0 | | 2025 | 4 | ## Affected versions (top 27 of 47) | Version | Kind | CVEs | | --- | --- | --- | | 13.5.3 | exact | 1 | | 13.6.1 | exact | 1 | | 13.7.1 | exact | 1 | | \>= 13.7.6 | range | 3 | | 13.4.1 \<= v \<= 13.4.4 | range | 3 | | 13.5.1 \<= v \<= 13.5.3 | range | 3 | | \>= 13.6.1 | range | 2 | | 13.7.1 \<= v \<= 13.7.4 | range | 2 | | \>= 12.7.8 | range | 1 | | \>= 13.5.4 | range | 1 | | \>= 13.6.2 | range | 1 | | \>= 13.7.1 | range | 1 | | \>= RTU500 12.0.15 | range | 1 | | \>= RTU500 12.2.12 | range | 1 | | \>= RTU500 12.4.12 | range | 1 | | 13.7.6 | patched | 3 | | 12.7.8 | patched | 1 | | 13.5.4 | patched | 1 | | 13.6.2 | patched | 1 | | 13.7.1 | patched | 1 | | RTU500 12.0.15 | patched | 1 | | RTU500 12.2.12 | patched | 1 | | RTU500 12.4.12 | patched | 1 | | RTU500 12.6.9 | patched | 1 | | RTU500 12.7.5 | patched | 1 | | RTU500 13.2.6 | patched | 1 | | RTU500 13.3.4 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2025-1445 | - | high | 8.7 | No | No | Yes | | CVE-2024-12169 | - | high | 8.7 | No | No | Yes | | CVE-2024-11499 | - | medium | 6.9 | No | No | Yes | | CVE-2024-10037 | - | medium | 5.9 | No | No | Yes | | CVE-2023-6711 | - | high | 7.5 | No | No | Yes | | CVE-2023-5769 | - | medium | 6.1 | No | No | No | | CVE-2023-5767 | - | medium | 6.1 | No | No | No | | CVE-2022-4608 | - | high | 7.5 | No | No | Yes | | CVE-2022-2502 | - | high | 7.5 | No | No | Yes | | CVE-2022-3353 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products | high | 7.5 | No | No | Yes | | CVE-2022-28613 | Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series | high | 7.5 | No | No | Yes | | CVE-2021-35533 | Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series | high | 7.5 | No | No | Yes | | CVE-2021-27196 | Specially Crafted IEC 61850 Protocol Sequence Vulnerability | high | 7.5 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Hitachi Energy RTU500 have? Hitachi Energy RTU500 has 13 published CVE records since 2021. ### How many Hitachi Energy RTU500 CVEs are in CISA KEV? None of Hitachi Energy RTU500's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Hitachi Energy RTU500 vulnerabilities? No Hitachi Energy RTU500 CVEs currently have a tracked public exploit in this dataset. ### Which versions of Hitachi Energy RTU500 are affected? 47 distinct Hitachi Energy RTU500 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Hitachi Energy RTU500 CVEs? Hitachi Energy RTU500's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-476 (NULL Pointer Dereference), CWE-787 (Out-of-bounds Write). ### What is the average severity of Hitachi Energy RTU500 CVEs? The average CVSS base score across Hitachi Energy RTU500's scored CVEs is 7.3. ## Other products from this vendor - [MicroSCADA X SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600) (20 CVEs) - [eSOMS](https://radicalnotion.ai/vendor/hitachi-energy/esoms) (19 CVEs) - [FOXMAN-UN](https://radicalnotion.ai/vendor/hitachi-energy/foxman-un) (15 CVEs) - [UNEM](https://radicalnotion.ai/vendor/hitachi-energy/unem) (15 CVEs) - [RTU500 series CMU firmware](https://radicalnotion.ai/vendor/hitachi-energy/rtu500-series-cmu-firmware) (13 CVEs) - [Asset Suite](https://radicalnotion.ai/vendor/hitachi-energy/asset-suite) (8 CVEs) - [MicroSCADA SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600) (8 CVEs) - [relion 670](https://radicalnotion.ai/vendor/hitachi-energy/relion-670) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hitachi-energy/rtu500). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.