TRO600 Series Firmware vulnerabilities

2 known vulnerabilities in TRO600 Series Firmware from Hitachi Energy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  TRO600 Series Firmware: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2026-10756Oct 27, 2026Hitachi Energy

  TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and s

• 8.7 High severity

  TRO600 Series Firmware: Missing Authentication for Critical Functionality

  CVE-2026-106087Oct 27, 2026Hitachi Energy

  TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure