Description (CNA)
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hitachi Energy / RTU500 series CMU firmware | affected 13.2.1 through 13.2.7; affected 13.4.1 through 13.4.4; affected 13.5.1 through 13.5.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.