← CVE Intelligence

CVE-2026-8479

Hitachi Energy / RTU500 series CMU firmware PUBLISHED

Description (CNA)

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.

Affected (CNA)

Vendor / productVersions
Hitachi Energy / RTU500 series CMU firmwareaffected 12.7.1 through 12.7.7; affected 13.5.1 through 13.5.4; affected 13.6.1 through 13.6.3; affected 13.7.1 through 13.7.8; affected 13.8.1

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.