# cve.now: Hitachi Energy

The newest entries naming Hitachi Energy as an affected vendor (up to 200), of 118 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-106087](https://cve.now/CVE-2026-106087.md): TRO600 contains an arbitrary file read vulnerability. (CVSS 8.7)
- [CVE-2026-10756](https://cve.now/CVE-2026-10756.md): TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended… (CVSS 7.7)
- [CVE-2026-13162](https://cve.now/CVE-2026-13162.md): An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system… (CVSS 7.7)
- [CVE-2026-11796](https://cve.now/CVE-2026-11796.md): Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleR (CVSS 5.1)
- [CVE-2026-7395](https://cve.now/CVE-2026-7395.md): Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to (CVSS 8.5)
- [CVE-2026-8067](https://cve.now/CVE-2026-8067.md): An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the (CVSS 6.5)
- [CVE-2026-8066](https://cve.now/CVE-2026-8066.md): A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated (CVSS 9.1)
- [CVE-2026-8065](https://cve.now/CVE-2026-8065.md): An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticat (CVSS 9.1)
- [CVE-2026-17539](https://cve.now/CVE-2026-17539.md): RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference (CVSS 5.9)
- [CVE-2026-9854](https://cve.now/CVE-2026-9854.md): A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminis (CVSS 8.5)
- [CVE-2026-9853](https://cve.now/CVE-2026-9853.md): A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read a (CVSS 8.5)
- [CVE-2026-9852](https://cve.now/CVE-2026-9852.md): A CSV injection vulnerability exists in SYS600. (CVSS 4.6)
- [CVE-2026-10763](https://cve.now/CVE-2026-10763.md): PROMOD V is using insecure HTTP communication instead of HTTPS. (CVSS 7.0)
- [CVE-2026-8479](https://cve.now/CVE-2026-8479.md): IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of mess (CVSS 6.9)
- [CVE-2026-7310](https://cve.now/CVE-2026-7310.md): A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. (CVSS 4.4)
- [CVE-2026-2460](https://cve.now/CVE-2026-2460.md): A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using (CVSS 7.6)
- [CVE-2026-2459](https://cve.now/CVE-2026-2459.md): A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role (CVSS 7.4)
- [CVE-2026-1773](https://cve.now/CVE-2026-1773.md): IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. (CVSS 8.7)
- [CVE-2026-1772](https://cve.now/CVE-2026-1772.md): RTU500 web interface: An unprivileged user can read user management information. (CVSS 5.3)
- [CVE-2025-7740](https://cve.now/CVE-2025-7740.md): Use of default credentials vulnerability in Hitachi Energy SuprOS product (CVSS 8.8)
- [CVE-2025-1038](https://cve.now/CVE-2025-1038.md): The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authentica (CVSS 7.5)
- [CVE-2025-1037](https://cve.now/CVE-2025-1037.md): By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands (CVSS 7.5)
- [CVE-2025-1036](https://cve.now/CVE-2025-1036.md): Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. (CVSS 8.7)
- [CVE-2025-10217](https://cve.now/CVE-2025-10217.md): A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject craft (CVSS 6.0)
- [CVE-2025-39205](https://cve.now/CVE-2025-39205.md): A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. (CVSS 6.5)
- [CVE-2025-39204](https://cve.now/CVE-2025-39204.md): A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. (CVSS 8.5)
- [CVE-2025-39203](https://cve.now/CVE-2025-39203.md): A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. (CVSS 6.5)
- [CVE-2025-39202](https://cve.now/CVE-2025-39202.md): A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. (CVSS 8.3)
- [CVE-2025-39201](https://cve.now/CVE-2025-39201.md): A vulnerability exists in MicroSCADA X SYS600 product. (CVSS 6.1)
- [CVE-2025-2403](https://cve.now/CVE-2025-2403.md): A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and S (CVSS 7.5)
- [CVE-2025-1718](https://cve.now/CVE-2025-1718.md): An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to im (CVSS 6.5)
- [CVE-2025-2500](https://cve.now/CVE-2025-2500.md): A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. (CVSS 9.1)
- [CVE-2025-1484](https://cve.now/CVE-2025-1484.md): A vulnerability exists in the media upload component of the Asset Suite versions listed below. (CVSS 6.3)
- [CVE-2025-27631](https://cve.now/CVE-2025-27631.md): The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execu (CVSS 6.5)
- [CVE-2025-27633](https://cve.now/CVE-2025-27633.md): The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. (CVSS 6.1)
- [CVE-2025-1445](https://cve.now/CVE-2025-1445.md): A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61 (CVSS 8.7)
- [CVE-2025-27632](https://cve.now/CVE-2025-27632.md): A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request (CVSS 6.1)
- [CVE-2024-12169](https://cve.now/CVE-2024-12169.md): A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker perfo (CVSS 8.7)
- [CVE-2024-11499](https://cve.now/CVE-2024-11499.md): A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to p (CVSS 6.9)
- [CVE-2024-10037](https://cve.now/CVE-2024-10037.md): A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially cr (CVSS 5.9)
- [CVE-2024-9929](https://cve.now/CVE-2024-9929.md): A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps. (CVSS 4.3)
- [CVE-2024-9928](https://cve.now/CVE-2024-9928.md): A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. (CVSS 5.3)
- [CVE-2024-41156](https://cve.now/CVE-2024-41156.md): Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. (CVSS 2.7)
- [CVE-2024-41153](https://cve.now/CVE-2024-41153.md): Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system comm (CVSS 7.2)
- [CVE-2024-7941](https://cve.now/CVE-2024-7941.md): An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. (CVSS 4.3)
- [CVE-2024-7940](https://cve.now/CVE-2024-7940.md): The product exposes a service that is intended for local only to all network interfaces without any authentication. (CVSS 8.3)
- [CVE-2024-3982](https://cve.now/CVE-2024-3982.md): An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and (CVSS 8.2)
- [CVE-2024-3980](https://cve.now/CVE-2024-3980.md): The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesyst (CVSS 9.9)
- [CVE-2024-4872](https://cve.now/CVE-2024-4872.md): A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. (CVSS 9.9)
- [CVE-2024-28020](https://cve.now/CVE-2024-28020.md): A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. (CVSS 8.0)
- [CVE-2024-28024](https://cve.now/CVE-2024-28024.md): A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessib (CVSS 4.1)
- [CVE-2024-28022](https://cve.now/CVE-2024-28022.md): A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentic (CVSS 6.5)
- [CVE-2024-28023](https://cve.now/CVE-2024-28023.md): A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unint (CVSS 5.7)
- [CVE-2024-28021](https://cve.now/CVE-2024-28021.md): A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. (CVSS 7.4)
- [CVE-2024-2011](https://cve.now/CVE-2024-2011.md): A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can (CVSS 8.6)
- [CVE-2024-2012](https://cve.now/CVE-2024-2012.md): vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or cod (CVSS 9.1)
- [CVE-2024-2013](https://cve.now/CVE-2024-2013.md): An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers withou (CVSS 10.0)
- [CVE-2024-2461](https://cve.now/CVE-2024-2461.md): If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible (CVSS 6.9)
- [CVE-2024-2462](https://cve.now/CVE-2024-2462.md): Allow attackers to intercept or falsify data exchanges between the client and the server (CVSS 6.8)
- [CVE-2024-2378](https://cve.now/CVE-2024-2378.md): A vulnerability exists in the web-authentication component of the SDM600. (CVSS 8.0)
- [CVE-2024-2617](https://cve.now/CVE-2024-2617.md): A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature (CVSS 7.2)
- [CVE-2024-2377](https://cve.now/CVE-2024-2377.md): A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. (CVSS 7.6)
- [CVE-2024-2097](https://cve.now/CVE-2024-2097.md): An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control (CVSS 7.5)
- [CVE-2024-0400](https://cve.now/CVE-2024-0400.md): SCM Software is a client and server application. (CVSS 7.5)
- [CVE-2024-1532](https://cve.now/CVE-2024-1532.md): A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. (CVSS 6.8)
- [CVE-2024-1531](https://cve.now/CVE-2024-1531.md): A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. (CVSS 8.2)
- [CVE-2024-2244](https://cve.now/CVE-2024-2244.md): REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfu (CVSS 5.3)
- [CVE-2022-3864](https://cve.now/CVE-2022-3864.md): A vulnerability exists in the Relion update package signature validation. (CVSS 4.5)
- [CVE-2022-2081](https://cve.now/CVE-2022-2081.md): A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. (CVSS 7.5)
- [CVE-2023-6711](https://cve.now/CVE-2023-6711.md): Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. (CVSS 5.9)
- [CVE-2023-1514](https://cve.now/CVE-2023-1514.md): A vulnerability exists in the component RTU500 Scripting interface. (CVSS 7.4)
- [CVE-2023-5769](https://cve.now/CVE-2023-5769.md): A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. (CVSS 5.4)
- [CVE-2023-5768](https://cve.now/CVE-2023-5768.md): A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. (CVSS 5.9)
- [CVE-2023-5767](https://cve.now/CVE-2023-5767.md): A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. (CVSS 6.0)
- [CVE-2023-4518](https://cve.now/CVE-2023-4518.md): A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a (CVSS 6.5)
- [CVE-2023-5516](https://cve.now/CVE-2023-5516.md): Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing informatio (CVSS 5.3)
- [CVE-2023-5515](https://cve.now/CVE-2023-5515.md): The responses for web queries with certain parameters disclose internal path of resources. (CVSS 5.3)
- [CVE-2023-5514](https://cve.now/CVE-2023-5514.md): The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enume (CVSS 5.3)
- [CVE-2023-2622](https://cve.now/CVE-2023-2622.md): Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup servic (CVSS 2.7)
- [CVE-2023-2621](https://cve.now/CVE-2023-2621.md): The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer syst (CVSS 6.5)
- [CVE-2023-4816](https://cve.now/CVE-2023-4816.md): A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. (CVSS 6.9)
- [CVE-2022-4608](https://cve.now/CVE-2022-4608.md): A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. (CVSS 7.5)
- [CVE-2022-2502](https://cve.now/CVE-2022-2502.md): A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. (CVSS 7.5)
- [CVE-2023-2625](https://cve.now/CVE-2023-2625.md): A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, havi (CVSS 9.0)
- [CVE-2023-1711](https://cve.now/CVE-2023-1711.md): A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elem (CVSS 4.0)
- [CVE-2022-3685](https://cve.now/CVE-2022-3685.md): SDM600 software privilege level (CVSS 7.5)
- [CVE-2022-3686](https://cve.now/CVE-2022-3686.md): SDM600 API permission check (CVSS 4.8)
- [CVE-2022-3684](https://cve.now/CVE-2022-3684.md): SDM600 endpoint vulnerability (CVSS 7.5)
- [CVE-2022-3683](https://cve.now/CVE-2022-3683.md): SDM600 API web services authorization validation (CVSS 7.7)
- [CVE-2022-3682](https://cve.now/CVE-2022-3682.md): SDM600 file permission validation (CVSS 9.9)
- [CVE-2022-3353](https://cve.now/CVE-2022-3353.md): IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products (CVSS 5.9)
- [CVE-2022-2155](https://cve.now/CVE-2022-2155.md): A vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role. (CVSS 5.7)
- [CVE-2022-3929](https://cve.now/CVE-2022-3929.md): Communication between the client and server partially using CORBA over TCP/IP (CVSS 8.3)
- [CVE-2022-3928](https://cve.now/CVE-2022-3928.md): Hardcoded credential is found in the message queue (CVSS 7.1)
- [CVE-2022-3927](https://cve.now/CVE-2022-3927.md): The affected products store public and private key that are used to sign and protect custom parameter set files from modification. (CVSS 8.0)
- [CVE-2021-40342](https://cve.now/CVE-2021-40342.md): Use of default key for encryption (CVSS 7.1)
- [CVE-2021-40341](https://cve.now/CVE-2021-40341.md): Weak DES encryption (CVSS 7.1)
- [CVE-2022-2513](https://cve.now/CVE-2022-2513.md): Cleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 Products (CVSS 7.1)
- [CVE-2022-3388](https://cve.now/CVE-2022-3388.md): Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products (CVSS 8.8)
- [CVE-2022-29492](https://cve.now/CVE-2022-29492.md): A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... (CVSS 5.3)
- [CVE-2022-1778](https://cve.now/CVE-2022-1778.md): A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ... (CVSS 7.5)
- [CVE-2022-29922](https://cve.now/CVE-2022-29922.md): A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... (CVSS 7.5)
- [CVE-2022-2277](https://cve.now/CVE-2022-2277.md): A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ... (CVSS 7.5)
- [CVE-2022-29490](https://cve.now/CVE-2022-29490.md): A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. (CVSS 8.5)
- [CVE-2021-40336](https://cve.now/CVE-2021-40336.md): HTTP Response Splitting in Hitachi Energy’s MSM Product (CVSS 5.0)
- [CVE-2021-40335](https://cve.now/CVE-2021-40335.md): Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product (CVSS 5.0)
- [CVE-2021-35530](https://cve.now/CVE-2021-35530.md): User authentication bypass in TXpert Hub CoreTec 4 (CVSS 6.0)
- [CVE-2021-35531](https://cve.now/CVE-2021-35531.md): Remote Code Execution in TXpert Hub CoreTec 4 (no CVSS)
- [CVE-2021-35532](https://cve.now/CVE-2021-35532.md): Firmware upload verification bypass in TXpert Hub CoreTec 4 (no CVSS)
- [CVE-2022-28613](https://cve.now/CVE-2022-28613.md): Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series (CVSS 7.5)
- [CVE-2021-40337](https://cve.now/CVE-2021-40337.md): OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product (CVSS 4.2)
- [CVE-2021-40333](https://cve.now/CVE-2021-40333.md): Weak default credential associated with TCP port 26 (CVSS 9.0)
- [CVE-2021-40334](https://cve.now/CVE-2021-40334.md): SSH activation problem in the proprietary management protocol (port TCP 5558) (CVSS 8.6)
- [CVE-2021-35533](https://cve.now/CVE-2021-35533.md): Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series (CVSS 7.5)
- [CVE-2021-35534](https://cve.now/CVE-2021-35534.md): Insufficient Security Control Vulnerability (CVSS 7.2)
- [CVE-2021-35535](https://cve.now/CVE-2021-35535.md): Insufficient Security Control Vulnerability (CVSS 8.1)
- [CVE-2021-35528](https://cve.now/CVE-2021-35528.md): Authentication Bypass Vulnerability Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB) (CVSS 7.2)
- [CVE-2021-22278](https://cve.now/CVE-2021-22278.md): Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool (CVSS 6.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/hitachi-energy
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.