Known vulnerabilities in RTU500 CMU
Vendor:
Hitachi Energy
Software:
RTU500 CMU
Software CPE:
cpe:2.3:h:hitachi_energy:rtu500_cmu:*:*:*:*:*:*:*:*
Total vulnerabilities:
17
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
13.7.4
13.7.3
13.7.2
13.7.6
13.6.2
13.5.4
12.7.8
13.7.1
13.6.1
12.6.10
13.2.7
12.7.7
13.5.3
13.5.2
13.5.1
13.4.4
13.4.3
13.4.2
13.2.6
12.7.6
12.7.5
12.6.9
12.2.11
12.0.14
13.4.1
13.3.3
13.3.1
13.2.4
13.2.2
12.7.3
13.3.2.0
13.2.5.0
12.7.4.0
12.6.8.0
12.4.12.0
12.2.12.0
13.0.0
12.7.0
13.2.1
13.1.2
13.1.1
13.0.2
13.0.1
12.7.1
12.6.6
12.6.5
12.6.4
12.6.3
12.6.2
12.6.1
12.4.10
12.4.9
12.4.8
12.4.7
12.4.6
12.4.5
12.4.4
12.4.3
12.4.2
12.4.1
12.2.10
12.2.9
12.2.8
12.2.7
12.2.6
12.2.5
12.2.4
12.2.3
12.2.2
12.2.1
12.0.13
12.0.12
12.0.11
12.0.10
12.0.9
12.0.8
12.0.7
12.0.6
12.0.5
12.0.4
12.0.3
12.0.2
12.0.1
13.2.3
12.7.2
12.6.7
12.4.11
12.4
12.2
12.6.5.0
12.0.14.0
12.2.11.0
12.4.10.0
12.6.1.0
12.0
11.0
10.0
9.0
8.0
7.0
Vulnerabilities (17)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU106987 - Missing Synchronization CVE-2025-1445 |
CWE-820 | High | - | 04.04.2025 |
SB2025040420 |
||
| #VU106986 - Insufficient Resource Pool CVE-2024-12169 |
CWE-410 | Medium | - | 04.04.2025 |
SB2025040420 |
||
| #VU106985 - NULL Pointer Dereference CVE-2024-11499 |
CWE-476 | Low | - | 04.04.2025 |
SB2025040420 |
||
| #VU106984 - NULL Pointer Dereference CVE-2024-10037 |
CWE-476 | Low | 13.7.1 | 04.04.2025 |
SB2025040419 |
||
| #VU89013 - Unrestricted Upload of File with Dangerous Type CVE-2024-1532 |
CWE-434 | Low | 12.7.7, 13.2.7 | 26.04.2024 |
SB2024042621 |
||
| #VU89012 - Unrestricted Upload of File with Dangerous Type CVE-2024-1531 |
CWE-434 | Low | 12.7.7, 13.2.7 | 26.04.2024 |
SB2024042621 |
||
| #VU79282 - Stack-based buffer overflow CVE-2022-4608 |
CWE-121 | Medium | 13.3.3, 13.4.1 | 09.08.2023 |
SB2023080925 |
||
| #VU79278 - Stack-based buffer overflow CVE-2022-2502 |
CWE-121 | Medium | 13.3.3, 13.4.1 | 09.08.2023 |
SB2023080925 |
||
| #VU66913 - Improper input validation CVE-2022-28613 |
CWE-20 | Medium | 12.0.14.0, 12.2.12.0, 12.4.12.0, 12.6.8.0, 12.7.4.0, 13.2.5.0, 13.3.1 | 01.09.2022 |
SB2022090136 |
||
| #VU66734 - Stack-based buffer overflow CVE-2022-2081 |
CWE-121 | Medium | 12.0.14.0, 12.2.12.0, 12.4.12.0, 12.6.8.0, 12.7.4.0, 13.2.5.0, 13.3.2.0 | 24.08.2022 |
SB2022082404 |
||
| #VU58504 - Improper input validation CVE-2021-35533 |
CWE-20 | Medium | 12.6.5.0 | 03.12.2021 |
SB2021120308 |
||
| #VU54224 - Out-of-bounds write CVE-2021-3517 |
CWE-787 | High | 12.0.14.0, 12.2.11.0, 12.4.11, 12.6.7, 12.7.2, 13.2.3 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 42 more |
||
| #VU51954 - Improper input validation CVE-2021-27196 |
CWE-20 | Medium | 12.0.14.0, 12.2.11.0, 12.4.10.0, 12.6.1.0 | 07.04.2021 |
SB2021040705 |
||
| #VU50396 - Type confusion CVE-2020-36229 |
CWE-843 | Medium | 12.4.11, 12.6.7, 12.7.2, 13.2.3 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 15 more |
||
| #VU50397 - Reachable Assertion CVE-2020-36230 |
CWE-617 | Medium | 12.4.11, 12.6.7, 12.7.2, 13.2.3 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 15 more |
||
| #VU46573 - Exposure of sensitive information to an unauthorized actor CVE-2020-1968 |
CWE-200 | Medium | 12.0.14.0, 12.2.11.0, 12.4.11, 12.6.7, 12.7.2, 13.2.3 | 10.09.2020 |
SB2020091011 SB2020121720 SB2021012078 and 22 more |
||
| #VU46737 - Out-of-bounds read CVE-2020-24977 |
CWE-125 | Medium | 12.0.14.0, 12.2.11.0, 12.4.11, 12.6.7, 12.7.2, 13.2.3 | 04.09.2020 |
SB2020091517 SB2020091519 SB2020091641 and 33 more |