PT-2026-102474 · Hitachi Energy · Rtu500
CVE-2026-8066
·
Published
2026-09-29
·
Updated
2026-09-29
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Hitachi Energy RTU500 end-of-life versions
Description
A directory traversal issue exists in the file upload functionality. This allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Successful exploitation may lead to unauthorized modification of device data or disruption of the device's intended operation. Directory traversal is a flaw that allows an attacker to access and manipulate files outside the intended directory.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Relative Path Traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rtu500