vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-5768

MEDIUM
6.1
CVSS Score
Published: December 4, 2023 at 02:33 PM UTC
Updated: June 17, 2026 at 06:49 AM UTC
9 products affected across 1 vendorRTU520 FirmwareRTU530 FirmwareRTU540 Firmware

Using RTU500 series by Hitachi Energy?

Get instant alerts when new vulnerabilities affect RTU500 series - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.1
Exploit prediction
EPSS 0.4%

Description

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length information of APDU or delayed reception of data octets. Only communication link of affected HCI IEC 60870-5-104 is blocked. If attack sequence stops the communication to the previously attacked link gets normal again.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

RTU520 Firmware· Hitachi Energy
95%
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu520 (same device)
RTU530 Firmware· Hitachi Energy
95%
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu530 (same device)
RTU540 Firmware· Hitachi Energy
95%
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu540 (same device)
RTU560 Firmware· Hitachi Energy
95%
12.0.1 ≤ v ≤ 12.0.1412.2.1 ≤ v ≤ 12.2.1112.4.1 ≤ v ≤ 12.4.1112.6.1 ≤ v ≤ 12.6.912.7.1 ≤ v ≤ 12.7.613.2.1 ≤ v ≤ 13.2.613.4.1 ≤ v ≤ 13.4.3
hitachienergy-rtu560 (same device)
RTU500· Hitachi Energy
60%
RTU500 series CMU Firmware version 12.0.1 – 12.0.14RTU500 series CMU Firmware version 12.2.1 – 12.2.11RTU500 series CMU Firmware version 12.4.1 – 12.4.11RTU500 series CMU Firmware version 12.6.1 – 12.6.9RTU500 series CMU Firmware version 12.7.1 – 12.7.6RTU500 series CMU Firmware version 13.2.1 – 13.2.6RTU500 series CMU Firmware version 13.4.1 – 13.4.3
Rtu520· Hitachi Energydevice
80%
All versions
Rtu530· Hitachi Energydevice
80%
All versions
Rtu540· Hitachi Energydevice
80%
All versions
Rtu560· Hitachi Energydevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=true

CVSS

6.1MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card