cnvd - cnvd-2025-02734

cnvd-2025-02734

Vulnerability from cnvd

Title: Hitachi Energy RTU500 series CMU Firmware存在未明漏洞（ CNVD-2025-02734）

Description:

RTU500是日本日立制作所（Hitachi）公司的一系列工控组件，主要用于工业控制系统。

Hitachi Energy RTU500 series CMU Firmware存在安全漏洞，攻击者可利用漏洞绕过安全更新。

Severity: 高

Patch Name: Hitachi Energy RTU500 series CMU Firmware存在未明漏洞（CNVD-2025-02734）的补丁

Patch Description:

RTU500是日本日立制作所（Hitachi）公司的一系列工控组件，主要用于工业控制系统。

Hitachi Energy RTU500 series CMU Firmware存在安全漏洞，攻击者可利用漏洞绕过安全更新。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布补丁修复漏洞，请广大用户及时下载更新： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177

Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177

Impacted products

Name
['Hitachi Energy RTU500 series CMU Firmware >=13.2.1，<13.2.7', 'Hitachi Energy RTU500 series CMU Firmware >=13.4.1，<13.4.4', 'Hitachi Energy RTU500 series CMU Firmware >=13.5.1，<13.5.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-2617",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-2617"
    }
  },
  "description": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002\n\nHitachi Energy RTU500 series CMU Firmware\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u66f4\u65b0\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u8865\u4e01\u4fee\u590d\u6f0f\u6d1e\uff0c\u8bf7\u5e7f\u5927\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-02734",
  "openTime": "2025-02-12",
  "patchDescription": "RTU500\u662f\u65e5\u672c\u65e5\u7acb\u5236\u4f5c\u6240\uff08Hitachi\uff09\u516c\u53f8\u7684\u4e00\u7cfb\u5217\u5de5\u63a7\u7ec4\u4ef6\uff0c\u4e3b\u8981\u7528\u4e8e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u3002\r\n\r\nHitachi Energy RTU500 series CMU Firmware\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u66f4\u65b0\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Hitachi Energy RTU500 series CMU Firmware\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2025-02734\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Hitachi Energy RTU500 series CMU Firmware \u003e=13.2.1\uff0c\u003c13.2.7",
      "Hitachi Energy RTU500 series CMU Firmware \u003e=13.4.1\uff0c\u003c13.4.4",
      "Hitachi Energy RTU500 series CMU Firmware \u003e=13.5.1\uff0c\u003c13.5.3"
    ]
  },
  "referenceLink": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177",
  "serverity": "\u9ad8",
  "submitTime": "2024-05-11",
  "title": "Hitachi Energy RTU500 series CMU Firmware\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08 CNVD-2025-02734\uff09"
}

CVE-2024-2617 (GCVE-0-2024-2617)

Vulnerability from cvelistv5

Published

2024-04-30 12:57

Modified

2024-08-01 19:18

Severity ?

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a malicious actor successfully exploits this vulnerability, they could use it to update the RTU500 with unsigned firmware.

References

▼	URL	Tags
	https://publisher.hitachienergy.com/preview?DocumentId=8DBD000199&languageCode=en&Preview=true

Impacted products

	Vendor	Product	Version
	Hitachi Energy	RTU500 series CMU firmware	Version: 13.2.1 < Version: 13.4.1 < Version: 13.5.1 <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:hitachienergy:rtu500_firmware:13.2.1.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rtu500_firmware",
            "vendor": "hitachienergy",
            "versions": [
              {
                "lessThanOrEqual": "13.2.7.0",
                "status": "affected",
                "version": "13.2.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:hitachienergy:rtu500_firmware:13.4.1.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rtu500_firmware",
            "vendor": "hitachienergy",
            "versions": [
              {
                "lessThanOrEqual": "13.4.4.0",
                "status": "affected",
                "version": "13.4.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:hitachienergy:rtu500_firmware:13.5.1.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rtu500_firmware",
            "vendor": "hitachienergy",
            "versions": [
              {
                "lessThanOrEqual": "13.5.3.0",
                "status": "affected",
                "version": "13.5.1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2617",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-30T16:11:48.392692Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-358",
                "description": "CWE-358 Improperly Implemented Security Check for Standard",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:29:04.729Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:18:48.011Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000199\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RTU500 series CMU firmware",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "13.2.7",
              "status": "affected",
              "version": "13.2.1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "13.4.4",
              "status": "affected",
              "version": "13.4.1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "13.5.3",
              "status": "affected",
              "version": "13.5.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\nA vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a\nmalicious actor successfully exploits this vulnerability, they\ncould use it to update the RTU500 with unsigned firmware.\n\n"
            }
          ],
          "value": "\nA vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a\nmalicious actor successfully exploits this vulnerability, they\ncould use it to update the RTU500 with unsigned firmware.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-30T12:57:37.143Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000199\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-2617",
    "datePublished": "2024-04-30T12:57:37.143Z",
    "dateReserved": "2024-03-18T17:44:43.352Z",
    "dateUpdated": "2024-08-01T19:18:48.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted