Denial of Service Vulnerability in RTU500 Web Server by Hitachi Energy

CVE-2024-10037

What is CVE-2024-10037?

A vulnerability exists in the RTU500 web server component that allows for a potential denial of service condition targeting the RTU500 CMU application. This vulnerability can be triggered if an attacker, who must be properly authenticated and have the test mode function enabled, sends a specially crafted sequence of messages over a WebSocket connection. If successfully executed, the affected CMU has the capability to automatically recover, reducing the impact of the exploit.

References