Hitachi Energy RTU500 Web Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the RTU500 web server component. This issue can disrupt the RTU500 CMU application by exploiting a WebSocket connection with a specially crafted message sequence. The vulnerability requires proper authentication and the test mode function of RTU500 to be enabled. If successfully exploited, the affected CMU will automatically recover from the disruption.

Impact

Exploitation of this vulnerability causes a denial-of-service condition on the RTU500 CMU application, although the application automatically recovers after the disruption.