CVE-2024-10037: medium-severity vulnerability in Hitachi Energy RTU500
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 0.3%
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket connection.
An attacker must be properly authenticated and the test mode function of RTU500 must be enabled to exploit this vulnerability.
The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/R:A
Affected products
Hitachi Energy · RTU500Related CVEs — Hitachi Energy RTU500
In the same product, most dangerous first.
CVE-2022-3353MEDIUMIEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy ProductsEPSS 1.1%CVE-2023-5769MEDIUMCVE-2023-5769EPSS 0.4%CVE-2024-12169HIGHCVE-2024-12169EPSS 0.4%CVE-2023-5767MEDIUMCVE-2023-5767EPSS 0.4%CVE-2025-1445HIGHCVE-2025-1445EPSS 0.3%CVE-2024-11499MEDIUMCVE-2024-11499EPSS 0.3%