Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-1773

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500 series CMU firmware

Default version status: unaffected

  • 12.7.1 to ≤ 12.7.7affected
  • 13.5.1 to ≤ 13.5.4affected
  • 13.6.1 to ≤ 13.6.2affected
  • 13.7.1 to ≤ 13.7.7affected
  • 13.8.1affected

References