CVE-2024-1532

MEDIUM

RTU500 - Info Disclosure

Title source: llm

Description

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.

References (1)

Core 1

Core References

Various Sources

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true

Scores

CVSS v3 6.8

EPSS 0.0003

EPSS Percentile 7.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-434

Status published

Products (8)

Hitachi Energy/RTU500 series CMU firmware 12.0.1 - 12.0.14

Hitachi Energy/RTU500 series CMU firmware 12.2.1 - 12.2.11

Hitachi Energy/RTU500 series CMU firmware 12.4.1 - 12.4.11

Hitachi Energy/RTU500 series CMU firmware 12.6.1 - 12.6.9

Hitachi Energy/RTU500 series CMU firmware 12.7.1 - 12.7.6

Hitachi Energy/RTU500 series CMU firmware 13.2.1 - 13.2.6

Hitachi Energy/RTU500 series CMU firmware 13.4.1 - 13.4.4

Hitachi Energy/RTU500 series CMU firmware 13.5.1 - 13.5.3

Published Mar 27, 2024

Tracked Since Feb 18, 2026