Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2023-5767

CVE-2023-5767

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500

Default version status: unaffected

  • RTU500 series CMU Firmware version 12.0.1 – 12.0.14affected
  • RTU500 series CMU Firmware version 12.2.1 – 12.2.11affected
  • RTU500 series CMU Firmware version 12.4.1 – 12.4.11affected
  • RTU500 series CMU Firmware version 12.6.1 – 12.6.9affected
  • RTU500 series CMU Firmware version 12.7.1 – 12.7.6affected
  • RTU500 series CMU Firmware version 13.2.1 – 13.2.6affected
  • RTU500 series CMU Firmware version 13.4.1 – 13.4.3affected

References