Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-8479

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500 series CMU firmware

Default version status: unaffected

  • 12.7.1 to ≤ 12.7.7affected
  • 13.5.1 to ≤ 13.5.4affected
  • 13.6.1 to ≤ 13.6.3affected
  • 13.7.1 to ≤ 13.7.8affected
  • 13.8.1affected

References