Hitachi Energy Vulnerabilities and Affected Products
Vulnerabilities associated with Relion REB500.
Products
Clear product- FOXMAN-UN15 vulnerabilities
- UNEM15 vulnerabilities
- MicroSCADA X SYS60014 vulnerabilities
- RTU500 series CMU firmware9 vulnerabilities
- RTU5007 vulnerabilities
- SDM6007 vulnerabilities
- MicroSCADA Pro SYS6005 vulnerabilities
- FOX61x4 vulnerabilities
- RTU500 series4 vulnerabilities
- Asset Suite3 vulnerabilities
- eSOMS3 vulnerabilities
- MicroSCADA SYS6003 vulnerabilities
- MSM3 vulnerabilities
- TRMTracker3 vulnerabilities
- TropOS 4th Gen3 vulnerabilities
- TXpert Hub CoreTec 4 version3 vulnerabilities
- GMS6002 vulnerabilities
- MACH System Software2 vulnerabilities
- NSD570 Teleprotection Equipment2 vulnerabilities
- PCM6002 vulnerabilities
- PWC6002 vulnerabilities
- Relion 670 Series2 vulnerabilities
- Relion 670/650 and SAM600-IO2 vulnerabilities
- Relion 670/650 Series2 vulnerabilities
- Relion 670/650/SAM600-IO2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-2460HIGH | Generated title:Hitachi Energy Relion REB500 Privilege Escalation via DAC ProtocolA vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so. CWE-267Feb 24, 2026 | CVSS7.6v4.0 | EPSS0.278% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-2459HIGH | Generated title:Hitachi Energy Relion REB500 Installer Role Unauthorized Directory AccessA vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so. CWE-267Feb 24, 2026 | CVSS7.4v4.0 | EPSS0.33% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |