Remote Code Execution Vulnerability in Hitachi Energy RTU500 Product Line

CVE-2024-12169

What is CVE-2024-12169?

A vulnerability in the RTU500 series by Hitachi Energy affects its IEC 60870-5-104 and IEC 61850 functionalities. If secure communication is enabled through IEC 62351-3 (TLS), the product may be susceptible to a specific attack sequence that can restart the affected communication module unit (CMU). This vulnerability necessitates immediate attention to reinforce cybersecurity measures and secure system configurations.

References