Hitachi Energy RTU500 CMU Restart Vulnerability in IEC 60870-4-104 Controlled Station Functionality

A vulnerability in the RTU500 series' IEC 60870-4-104 controlled station functionality allows an authenticated and authorized attacker to restart the Central Management Unit (CMU). This issue arises when certificates are updated while active connections are in use. If successfully exploited, the affected CMU will automatically recover from the restart.

Impact

Exploitation of this vulnerability allows for a controlled restart of the Central Management Unit, causing temporary disruption of services managed by the CMU.