Hitachi Energy Alert
9208Warning Date
Severity Level
Warning Number
Target Sector
24 August, 2022
● High
2022-5160
All
Description:
Hitachi Energy has released a security update to address several vulnerabilities in the following products:
- RTU500 series CMU Firmware version 12.0.1–12.0.13
- RTU500 series CMU Firmware version 12.2.1–12.2.11
- RTU500 series CMU Firmware version 12.4.1–12.4.11
- RTU500 series CMU Firmware version 12.6.1–12.6.7
- RTU500 series CMU Firmware version 12.7.1–12.7.3
- RTU500 series CMU Firmware version 13.2.1–13.2.4
- RTU500 series CMU Firmware version 13.3.1
- RTU500 series CMU Firmware version 12.0.1–12.0.13
- RTU500 series CMU Firmware version 12.2.1–12.2.11
- RTU500 series CMU Firmware version 12.4.1–12.4.11
- RTU500 series CMU Firmware version 12.6.1–12.6.7
- RTU500 series CMU Firmware version 12.7.1–12.7.3
- RTU500 series CMU Firmware version 13.2.1–13.2.4
- RTU500 series CMU Firmware version 13.3.1
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review Hitachi Energy security advisory and apply the necessary update: