Hitachi Energy vulnerabilities
118 published CVEs name Hitachi Energy among the affected products.
- 118Published CVEs118 of them scored
- 20Last 12 monthspublished in the last year
- 10Critical58 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-106087
TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the…
Hitachi Energy · TRO600 Series Firmware
High8.7 - CVE-2026-10756
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…
Hitachi Energy · TRO600 Series Firmware
High7.7 - CVE-2026-13162
An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control…
Hitachi Energy · CoreTec 5
High7.7 - CVE-2026-11796
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which…
Hitachi Energy · Asset Suite
Medium5.1 - CVE-2026-7395
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information…
Hitachi Energy · Asset Suite
High8.5 - CVE-2026-8067
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot…
Hitachi Energy · RTU500 series CMU firmware
Medium6.5 - CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write…
Hitachi Energy · RTU500 series CMU firmware
Critical9.1 - CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to…
Hitachi Energy · RTU500 series CMU firmware
Critical9.1 - CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry…
Hitachi Energy · RTU500 series CMU firmware
Medium5.9 - CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the…
Hitachi Energy · MicroSCADA SYS600
High8.5