CVE-2023-5767
MEDIUM
6.1
CVSS Score
Published: December 4, 2023 at 02:30 PM UTC
Updated: June 17, 2026 at 06:49 AM UTC
9 products affected across 1 vendorRTU520 FirmwareRTU530 FirmwareRTU540 Firmware
Using RTU500 by Hitachi Energy?
Get instant alerts when new vulnerabilities affect RTU500 - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.1
Exploit prediction
EPSS 0.4%
Description
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu520 (same device)
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu530 (same device)
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu540 (same device)
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu560 (same device)
RTU500 series CMU Firmware version 12.0.1 – 12.0.14RTU500 series CMU Firmware version 12.2.1 – 12.2.11RTU500 series CMU Firmware version 12.4.1 – 12.4.11RTU500 series CMU Firmware version 12.6.1 – 12.6.9RTU500 series CMU Firmware version 12.7.1 – 12.7.6RTU500 series CMU Firmware version 13.2.1 – 13.2.6RTU500 series CMU Firmware version 13.4.1 – 13.4.3
Rtu520· Hitachi Energydevice
80%All versions
Rtu530· Hitachi Energydevice
80%All versions
Rtu540· Hitachi Energydevice
80%All versions
Rtu560· Hitachi Energydevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- REQUIRED
- Scope
- CHANGED
- Confidentiality
- LOW
- Integrity
- LOW
- Availability
- NONE
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card