CVE-2024-1531: Hitachi Energy RTU500 Series Cmu Firmware

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file.

Affected products

• Hitachi Energy RTU500 Series Cmu Firmware: from 12.0.1, up to and including 12.0.14; from 12.2.1, up to and including 12.2.11; from 12.4.1, up to and including 12.4.11; from 12.6.1, up to and including 12.6.9; from 12.7.1, up to and including 12.7.6; from 13.2.1, up to and including 13.2.6; …

Published 2024-03-27. Last modified 2026-06-17.