high7.5
CVE-2026-1773
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.
Impact
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Rtu540 Firmware | from 12.7.1 through 12.7.7 from 13.5.1 through 13.5.4 from 13.6.1 through 13.6.2 from 13.7.1 before 13.7.8 Version 13.8.1 |
| Hitachienergy | Rtu560 Firmware | from 12.7.1 through 12.7.7 from 13.5.1 through 13.5.4 from 13.6.1 through 13.6.2 from 13.7.1 before 13.7.8 Version 13.8.1 |
| Hitachienergy | Rtu520 Firmware | from 12.7.1 through 12.7.7 from 13.5.1 through 13.5.4 from 13.6.1 through 13.6.2 from 13.7.1 before 13.7.8 Version 13.8.1 |
| Hitachienergy | Rtu530 Firmware | from 12.7.1 through 12.7.7 from 13.5.1 through 13.5.4 from 13.6.1 through 13.6.2 from 13.7.1 before 13.7.8 Version 13.8.1 |