← Back

CVE-2026-1772

nvd nist
Published: Feb 24, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: cybersecurity@hitachienergy.com (Secondary)

Description

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.

Affected (20)

Hitachienergy
4 products
Rtu520 Firmware
Rtu530 Firmware
Rtu540 Firmware
Rtu560 Firmware
Configuration A
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hitachienergy
Rtu520 Firmware
From 12.7.1 to 12.7.7
Rtu520 Firmware
From 13.5.1 to 13.5.4
Rtu520 Firmware
From 13.6.1 to 13.6.2
Rtu520 Firmware
From 13.7.1 to 13.7.8
Rtu520 Firmware
Version 13.8.1
Running on/withPlatform Versions
Hitachienergy
Rtu520
All versions
Configuration B
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hitachienergy
Rtu530 Firmware
From 12.7.1 to 12.7.7
Rtu530 Firmware
From 13.5.1 to 13.5.4
Rtu530 Firmware
From 13.6.1 to 13.6.2
Rtu530 Firmware
From 13.7.1 to 13.7.8
Rtu530 Firmware
Version 13.8.1
Running on/withPlatform Versions
Hitachienergy
Rtu530
All versions
Configuration C
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hitachienergy
Rtu540 Firmware
From 12.7.1 to 12.7.7
Rtu540 Firmware
From 13.5.1 to 13.5.4
Rtu540 Firmware
From 13.6.1 to 13.6.2
Rtu540 Firmware
From 13.7.1 to 13.7.8
Rtu540 Firmware
Version 13.8.1
Running on/withPlatform Versions
Hitachienergy
Rtu540
All versions
Configuration D
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hitachienergy
Rtu560 Firmware
From 12.7.1 to 12.7.7
Rtu560 Firmware
From 13.5.1 to 13.5.4
Rtu560 Firmware
From 13.6.1 to 13.6.2
Rtu560 Firmware
From 13.7.1 to 13.7.8
Rtu560 Firmware
Version 13.8.1
Running on/withPlatform Versions
Hitachienergy
Rtu560
All versions

Related CWEs

CWE-280
Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

References (1)

Source: cybersecurity@hitachienergy.com
Vendor Advisory

Timeline

No history available yet.