A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update,

if secure update feature was not enabled on all CMUs of a RTU500. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.

Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hitachi Energy RTU500 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.