CVE-2026-17539 PUBLISHED

Assigner: Hitachi Energy
Reserved: 27.07.2026 Published: 03.09.2026 Updated: 03.09.2026

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI_IEC104 fatal write error, resulting in connection interruption and restart, and ultimately a denial of service for bidirectional IEC 60870-5-104 communication.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 5.9

Attack Vector	Network	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Hitachi Energy
Product	RTU500 series CMU firmware
Versions	Default: unaffected affected from 12.7.1 to 12.7.7 (incl.) affected from 13.5.1 to 13.5.4 (incl.) affected from 13.6.1 to 13.6.3 (incl.) affected from 13.7.1 to 13.7.8 (incl.) affected from 13.8.1 to 13.8.2 (incl.)

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000259&LanguageCode=en&DocumentPartId=&Action=Launch

Problem Types

CWE-476 NULL pointer dereference CWE

Impacts

CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections