Hitachi Energy vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-13162 An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control High 7.7 · Oct 27, 2026
• CVE-2026-10756 TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only frHigh 7.7 · Oct 27, 2026
• CVE-2026-106087 TRO600 contains an arbitrary file read vulnerability.High 8.7 · Oct 27, 2026
• CVE-2026-8066 A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write oCritical 9.1 · Sep 29, 2026
• CVE-2026-8065 An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to uploaCritical 9.1 · Sep 29, 2026
• CVE-2026-7395 Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosuHigh 8.5 · Sep 29, 2026
• CVE-2026-9854 A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the High 8.5 · Sep 3, 2026
• CVE-2026-9853 A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify applicatioHigh 8.5 · Sep 3, 2026
• CVE-2026-10763 PROMOD V is using insecure HTTP communication instead of HTTPS.High 7 · Jun 30, 2026
• CVE-2026-2460 A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol thHigh 7.6 · Feb 24, 2026
• CVE-2026-2459 A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized tHigh 7.4 · Feb 24, 2026
• CVE-2026-1773 IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.High 8.7 · Feb 24, 2026
• CVE-2025-7740 Default credentials vulnerability exists in SuprOS product.High 8.8 · Jan 28, 2026
• CVE-2025-1038 The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high pHigh 7.5 · Oct 28, 2025
• CVE-2025-1037 By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands can enable access viHigh 7.5 · Oct 28, 2025
• CVE-2025-1036 Command injection vulnerability exists in the “Logging” page of the web-based configuration utility.High 8.7 · Oct 28, 2025
• CVE-2025-39205 A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product.High 7.1 · Jun 24, 2025
• CVE-2025-39204 A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product.High 8.5 · Jun 24, 2025
• CVE-2025-39203 A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product.High 7.1 · Jun 24, 2025
• CVE-2025-39202 A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product.High 8.3 · Jun 24, 2025
• CVE-2025-2403 A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series deviHigh 8.7 · Jun 24, 2025
• CVE-2025-1718 An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space maHigh 7.1 · Jun 24, 2025
• CVE-2025-2500 A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below.Critical 9.1 · May 30, 2025
• CVE-2025-1445 A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection tHigh 8.7 · Mar 25, 2025
• CVE-2024-12169 A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attHigh 8.7 · Mar 25, 2025