Siemens and other ICS vendors publish new vulnerability advisories
Node2Shell exploitation attempts have been seen, but Siemens reports no attacks aimed at its products.
64
Vendor
Hitachi Energy
- Mentions · 7d1
- Mentions · 30d7
- All mentions13
- First seenSep 17, 2026
- Last mentioned10h ago
Timeline
13 articles · newest firstHitachi Energy CoreTec flaws allow commands and local root
Authenticated users can inject OS commands, and a local user can reach root through the built-in Linux ESP code.
58
Hitachi Energy TRO600 flaws leak files and reach localhost services
An unauthenticated attacker can read configuration and password files; the fixes are 9.1.2.0 and 9.2.2.1.
57
Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
82
Hitachi Energy MicroSCADA X SYS600 flaws allow local privilege abuse
Versions 10.7 and earlier need 10.8 for two flaws; 10.8 still needs a documented mitigation for the authentication issue.
64
Hitachi Energy RTU500 CMU firmware flaws can disrupt ICS communications
Builds from 12.7.1 through 13.8.2 should move to 13.9.1 or named branch fixes; exploitation is not stated.
62
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.
68
Hitachi Energy SOI
CISA warns Hitachi Energy SOI 2.0.0–2.2.0 has an authenticated ActiveMQ code-injection flaw, CVE-2026-34197 (CVSS 8.8).
58
Hitachi Energy RTU500
CISA warns end-of-life Hitachi Energy RTU500 firmware has critical unauthenticated flaws, including arbitrary firmware upload.
66
Hitachi Energy REB500
Hitachi Energy REB500 8.3.3.1 and earlier can be crashed via libexpat flaws in IEC 61850 parsing.
36
Hitachi Energy Asset Suite
Hitachi Energy Asset Suite 9.9.0 and earlier expose unauthenticated servlets that can leak data or disrupt availability.
55
Hitachi security advisory (AV26-975)
Canada's Cyber Centre warns that Hitachi Energy RTU500 CMU firmware has vulnerabilities needing updates.
38
Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
48
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-9854<1%8.5Local Privilege Escalation in Hitachi Energy MicroSCADA X SYS600
- CVE-2026-9853<1%8.5Authentication Bypass in Hitachi Energy MicroSCADA X SYS600
- CVE-2026-6732<1%7.5libxml2: This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that…
- CVE-2023-46143<1%7.5Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all…
- CVE-2026-8932<1%7.5libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse
- Authenticated reboot via improper authorization in Hitachi Energy RTU500
- Missing auth on Asset Suite servlets can cause DoS
- CVE-2026-9852<1%4.6A CSV injection vulnerability exists in SYS600
Appears with
- CISAorganization · 9
- Schneider Electricvendor · 3
- Siemensvendor · 3
- Johnson Controlsvendor · 3
- Ruggedcom APE1808product · 2
- Moxavendor · 2
- RTU500product · 2
- Rockwell Automationvendor · 2
- ABBvendor · 2
- EasyIO Neo IO Managerproduct · 1
- Wibu-Systemsvendor · 1
- 1732E ArmorBlockproduct · 1
- Honeywellvendor · 1
- TRO600product · 1
- Asset Suiteproduct · 1
- EcoStruxure Security Expertproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.