Hitachi Energy CoreTec flaws allow commands and local root
Authenticated users can inject OS commands, and a local user can reach root through the built-in Linux ESP code.
1
Stories per day · 30 days
Relatedenergy4ics4arbitrary-file-read1coretec1csv-injection1denial-of-service1microscada1openssl1os-command-injection1privilege-escalation1rtu5001tro6001
6 stories, newest first · one card per story
Stories tagged #hitachi-energy
Hitachi Energy RTU500 CMU firmware flaws can disrupt ICS communications
Builds from 12.7.1 through 13.8.2 should move to 13.9.1 or named branch fixes; exploitation is not stated.
7
Hitachi Energy MicroSCADA X SYS600 flaws allow local privilege abuse
Versions 10.7 and earlier need 10.8 for two flaws; 10.8 still needs a documented mitigation for the authentication issue.
6
Hitachi Energy RTU500
CISA warns end-of-life Hitachi Energy RTU500 firmware has critical unauthenticated flaws, including arbitrary firmware upload.
5
Hitachi security advisory (AV26-975)
Canada's Cyber Centre warns that Hitachi Energy RTU500 CMU firmware has vulnerabilities needing updates.
Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
2