Not scored
CVE-2024-2617
Hitachi Energy RTU500 series CMU firmware vulnerability
Hitachi EnergyRTU500 series CMU firmware
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.7%probability of exploitation in the next 30 days
Higher than 51% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.
Coverage 1 article · 1 outlet
- Default ICS Credentials Exploited in Destructive Attack on Polish Energy FacilitiesSecurityWeek · first in our coverage