Hitachienergy vulnerabilities
We track 24 vulnerabilities in Hitachienergy products across 27 products. 24 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2026.
Latest Hitachienergy vulnerabilities
- 7.8 High severity
MicroSCADA SYS600: Incorrect Implementation of Authentication Algorithm
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.
- 7.8 High severity
MicroSCADA SYS600: Incorrect Implementation of Authentication Algorithm
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users shou
- 7.8 High severity
MicroSCADA SYS600: Improper Neutralization of Formula Elements in a CSV File
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the u
- 8.1 High severity
Relion REB500: Privilege Defined With Unsafe Actions
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.
- 8.1 High severity
Relion REB500: Privilege Defined With Unsafe Actions
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
- 7.5 High severity
RTU500 series CMU firmware: Incomplete List of Disallowed Inputs
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not reme
- 7.2 High severity
TRO600: Improper Neutralization of Special Elements used in a Command
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges,
- 8.8 High severity
MicroSCADA X SYS600: Improper Neutralization of Special Elements in Data Query Logic
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a
- 8.8 High severity
MicroSCADA X SYS600: Improper Limitation of a Pathname to a Restricted Directory
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that a
- 8.0 High severity
FOXMAN-UN: Incorrect User Management
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other se
- 9.8 Critical severity
FOXMAN-UN: Authentication Bypass Using an Alternate Path or Channel
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavi
- 7.4 High severity
FOXMAN-UN: Improper Certificate Validation
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.
- 7.2 High severity
RTU500 series CMU firmware: Improperly Implemented Security Check for Standard
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500. If a malicious actor successfully exploits this vulnerability, they could use it
- 8.0 High severity
SDM600: Incorrect Authorization
A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations.
- 7.6 High severity
SDM600: Origin Validation Error
A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.
- 7.5 High severity
MACH SCM Server: Improper Control of Generation of Code
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Too
- 7.5 High severity
RTU500 series CMU firmware: Out-of-bounds Write
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rat
- 7.5 High severity
RTU500 series CMU Firmware: Buffer Copy without Checking Size of Input
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as fi
- 7.5 High severity
Relion670: Improper Validation of Specified Quantity in Input
A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured.
- 8.8 High severity
Asset Suite 9: Improper Authentication
A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Rel
- 7.5 High severity
RTU500 series: Out-of-bounds Write
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is e
- 7.5 High severity
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the…
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license fe
- 7.5 High severity
FOX61x TEGO1: Improper Resource Shutdown or Release
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop
- 7.1 High severity
Lumada APM: Incorrect Authorization
A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that mana