CVE-2026-1772
5.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Summary
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Hitachi Energy | RTU500 series CMU firmware | 12.7.1 <= 12.7.7 | affected |
| Hitachi Energy | RTU500 series CMU firmware | 13.5.1 <= 13.5.4 | affected |
| Hitachi Energy | RTU500 series CMU firmware | 13.6.1 <= 13.6.2 | affected |
| Hitachi Energy | RTU500 series CMU firmware | 13.7.1 <= 13.7.7 | affected |
| Hitachi Energy | RTU500 series CMU firmware | 13.8.1 | affected |
Weaknesses
- CWE-280: CWE-280 Improper Handling of Insufficient Permissions or Privileges
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.