VDB

CVE-2026-24515

CVE-2026-24515 PUBLISHED CVSS 7.800000190734863 HIGH

Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. If exploited, these vulnerabilities primarily impact product availability, with potential secondary impacts on confidentiality and integrity. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy RTU500 are affected: RTU500 series CMU Firmware vers:RTU500_series_CMU_Firmware/>=12.7.1|=13.5.1|=13.6.1|=13.7.1|=13.7.1| CVSS Vendor Equipment Vulnerabilities v3 7.8 Hitachi Energy Hitachi Energy RTU500 NULL Pointer Dereference, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop') Background Critical Infrastructure Sectors: Dams, Energy, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: Switzerland

EPSS 0.01% · 0.6th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.01%
0.6th percentile

Exploit Intelligence

…and 20 more exploits

Timeline

  • Jan 23, 2026 EPSS Score
  • Jan 23, 2026 CVE Published
  • Jan 26, 2026 EPSS Score
  • Jan 28, 2026 EPSS Score
  • Jan 31, 2026 EPSS Score
  • Feb 3, 2026 EPSS Score
  • Feb 5, 2026 EPSS Score
  • Feb 8, 2026 EPSS Score
  • Feb 11, 2026 EPSS Score
  • Feb 13, 2026 EPSS Score
  • Feb 16, 2026 EPSS Score
  • Feb 19, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›