Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-2617

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update,

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500 series CMU firmware

Default version status: unaffected

  • 13.2.1 to ≤ 13.2.7affected
  • 13.4.1 to ≤ 13.4.4affected
  • 13.5.1 to ≤ 13.5.3affected

References