HI
Vendor
Hitachienergy
189
CVEs
0
On KEV
0
New 30D
Products
ES9.8
Esoms
Hitachienergy
19 CVEs0 on KEV0 new
MX9.8
Microscada X Sys600
Hitachienergy
19 CVEs0 on KEV0 new
FU10.0
Foxman UN
Hitachienergy
13 CVEs0 on KEV0 new
UN10.0
Unem
Hitachienergy
13 CVEs0 on KEV0 new
R610.0
Relion 670 Firmware
Hitachienergy
8 CVEs0 on KEV0 new
RF7.5
Rtu500 Firmware
Hitachienergy
8 CVEs0 on KEV0 new
R68.1
Relion 650 Firmware
Hitachienergy
7 CVEs0 on KEV0 new
SD9.1
Sdm600
Hitachienergy
7 CVEs0 on KEV0 new
RS8.1
Relion Sam600-io Firmware
Hitachienergy
6 CVEs0 on KEV0 new
RF7.5
Rtu520 Firmware
Hitachienergy
6 CVEs0 on KEV0 new
RF7.5
Rtu530 Firmware
Hitachienergy
6 CVEs0 on KEV0 new
RF7.5
Rtu540 Firmware
Hitachienergy
6 CVEs0 on KEV0 new
RF7.5
Rtu560 Firmware
Hitachienergy
6 CVEs0 on KEV0 new
MP9.8
Microscada Pro Sys600
Hitachienergy
4 CVEs0 on KEV0 new
MS8.8
Modular Switchgear Monitoring Firmware
Hitachienergy
4 CVEs0 on KEV0 new
RF8.1
Reb500 Firmware
Hitachienergy
4 CVEs0 on KEV0 new
TH7.5
Txpert Hub Coretec 4 Firmware
Hitachienergy
4 CVEs0 on KEV0 new
AS8.8
Asset Suite
Hitachienergy
3 CVEs0 on KEV0 new
GF7.5
Gms600 Firmware
Hitachienergy
3 CVEs0 on KEV0 new
MA7.5
Modular Advanced Control For Hvdc
Hitachienergy
3 CVEs0 on KEV0 new
PF7.5
Pwc600 Firmware
Hitachienergy
3 CVEs0 on KEV0 new
EE6.1
Ellipse Enterprise Asset Management
Hitachienergy
2 CVEs0 on KEV0 new
FF6.5
Fox515t Firmware
Hitachienergy
2 CVEs0 on KEV0 new
FF7.5
Fox615 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
FT7.5
Fox615 Tego1 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
MS8.8
Microscada Sys600
Hitachienergy
2 CVEs0 on KEV0 new
RO7.2
Retail Operations
Hitachienergy
2 CVEs0 on KEV0 new
SF7.8
Sys600 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
TF7.2
Tro610 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
TF7.2
Tro620 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
TF7.2
Tro670 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
XF7.5
Xcm20 Firmware
Hitachienergy
2 CVEs0 on KEV0 new
655.5
650connectivitypackage
Hitachienergy
1 CVEs0 on KEV0 new
675.5
670connectivitypackage
Hitachienergy
1 CVEs0 on KEV0 new
CS7.2
Counterparty Settlement And Billing
Hitachienergy
1 CVEs0 on KEV0 new
CS7.1
Counterparty Settlements And Billing
Hitachienergy
1 CVEs0 on KEV0 new
EL8.8
Ellipse
Hitachienergy
1 CVEs0 on KEV0 new
GM5.5
Gms600connectivitypackage
Hitachienergy
1 CVEs0 on KEV0 new
IS7.5
Itt600 SA Explorer
Hitachienergy
1 CVEs0 on KEV0 new
LA7.1
Lumada Asset Performance Management
Hitachienergy
1 CVEs0 on KEV0 new
NF5.3
Nsd570 Firmware
Hitachienergy
1 CVEs0 on KEV0 new
PC5.5
Pcm600
Hitachienergy
1 CVEs0 on KEV0 new
PW5.5
Pwc600connectivitypackage
Hitachienergy
1 CVEs0 on KEV0 new
R67.5
Relion 630 Firmware
Hitachienergy
1 CVEs0 on KEV0 new
RS7.5
Rtu500 Scripting Interface
Hitachienergy
1 CVEs0 on KEV0 new
SA5.5
Sam600ioconnectivitypackage
Hitachienergy
1 CVEs0 on KEV0 new
TH7.5
Txpert Hub Coretec 5 Firmware
Hitachienergy
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-9854 | MX Microscada X Sys600 Hitachienergy | 7.8 | Sep 3 | A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows… |
| CVE-2026-9853 | MX Microscada X Sys600 Hitachienergy | 7.8 | Sep 3 | A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without… |
| CVE-2026-9852 | MX Microscada X Sys600 Hitachienergy | 7.8 | Sep 3 | A CSV injection vulnerability exists in SYS600 |
| CVE-2026-2460 | RF Reb500 Firmware Hitachienergy | 8.1 | Feb 24 | A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not… |
| CVE-2026-2459 | RF Reb500 Firmware Hitachienergy | 8.1 | Feb 24 | A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so |
| CVE-2026-1773 | RF Rtu560 Firmware Hitachienergy | 7.5 | Feb 24 | IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality… |
| CVE-2026-1772 | RF Rtu560 Firmware Hitachienergy | 5.3 | Feb 24 | RTU500 web interface: An unprivileged user can read user management information |
| CVE-2025-39205 | MX Microscada X Sys600 Hitachienergy | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product |
| CVE-2025-39204 | MX Microscada X Sys600 Hitachienergy | 6.5 | Jun 24 | A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product |
| CVE-2025-39203 | MX Microscada X Sys600 Hitachienergy | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product |
| CVE-2025-39202 | MX Microscada X Sys600 Hitachienergy | 8.1 | Jun 24 | A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product |
| CVE-2025-39201 | MX Microscada X Sys600 Hitachienergy | 6.1 | Jun 24 | A vulnerability exists in MicroSCADA X SYS600 product |
| CVE-2024-9928 | NF Nsd570 Firmware Hitachienergy | 5.3 | Nov 26 | A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts |
| CVE-2024-41156 | TF Tro610 Firmware Hitachienergy | 2.7 | Oct 29 | Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats |
| CVE-2024-41153 | TF Tro670 Firmware Hitachienergy | 7.2 | Oct 29 | Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands |
| CVE-2024-7941 | MX Microscada X Sys600 Hitachienergy | 4.3 | Aug 27 | An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL |
| CVE-2024-7940 | MX Microscada X Sys600 Hitachienergy | 9.8 | Aug 27 | The product exposes a service that is intended for local only to all network interfaces without any authentication |
| CVE-2024-3982 | MX Microscada X Sys600 Hitachienergy | 8.2 | Aug 27 | An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of… |
| CVE-2024-3980 | MX Microscada X Sys600 Hitachienergy | 8.8 | Aug 27 | The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations |
| CVE-2024-4872 | MX Microscada X Sys600 Hitachienergy | 8.8 | Aug 27 | A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product |
| CVE-2024-28020 | FO Foxman-un Hitachienergy | 8.0 | Jun 11 | A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management |
| CVE-2024-28024 | UN Unem Hitachienergy | 4.1 | Jun 11 | A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere |
| CVE-2024-28022 | FO Foxman-un Hitachienergy | 6.5 | Jun 11 | A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different… |
| CVE-2024-28021 | UN Unem Hitachienergy | 7.4 | Jun 11 | A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation |
| CVE-2024-2011 | UN Unem Hitachienergy | 9.8 | Jun 11 | A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code,… |
| CVE-2024-2012 | UN Unem Hitachienergy | 9.8 | Jun 11 | vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server… |
| CVE-2024-2013 | UN Unem Hitachienergy | 10.0 | Jun 11 | An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the… |
| CVE-2024-2378 | SD Sdm600 Hitachienergy | 8.0 | Apr 30 | A vulnerability exists in the web-authentication component of the SDM600 |
| CVE-2024-2617 | RF Rtu500 Firmware Hitachienergy | 7.2 | Apr 30 | A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if secure update feature was not enabled on all CMUs of a RTU500 |
| CVE-2024-2377 | SD Sdm600 Hitachienergy | 7.6 | Apr 30 | A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600 |
| CVE-2024-2097 | MA Modular Advanced Control For Hvdc Hitachienergy | 7.5 | Mar 27 | An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the… |
| CVE-2024-2244 | AS Asset Suite Hitachienergy | 5.3 | Mar 27 | REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation |
| CVE-2022-3864 | R6 Relion 670 Firmware Hitachienergy | 4.5 | Jan 4 | A vulnerability exists in the Relion update package signature validation |
| CVE-2022-2081 | RF Rtu520 Firmware Hitachienergy | 7.5 | Jan 4 | A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above |
| CVE-2023-6711 | RF Rtu500 Firmware Hitachienergy | 7.5 | Dec 19 | Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below |
| CVE-2023-1514 | RS Rtu500 Scripting Interface Hitachienergy | 7.5 | Dec 19 | A vulnerability exists in the component RTU500 Scripting interface |
| CVE-2023-5769 | RF Rtu520 Firmware Hitachienergy | 6.1 | Dec 14 | A vulnerability exists in the webserver that affects the RTU500 series product versions listed below |
| CVE-2023-5768 | RF Rtu520 Firmware Hitachienergy | 6.1 | Dec 4 | A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below |
| CVE-2023-5767 | RF Rtu520 Firmware Hitachienergy | 6.1 | Dec 4 | A vulnerability exists in the webserver that affects the RTU500 series product versions listed below |
| CVE-2023-4518 | R6 Relion 670 Firmware Hitachienergy | 7.5 | Dec 1 | A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device |
| CVE-2023-5516 | ES Esoms Hitachienergy | 5.3 | Nov 1 | Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and… |
| CVE-2023-5515 | ES Esoms Hitachienergy | 5.3 | Nov 1 | The responses for web queries with certain parameters disclose internal path of resources |
| CVE-2023-5514 | ES Esoms Hitachienergy | 5.3 | Nov 1 | The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local file system structure |
| CVE-2023-2622 | MA Modular Advanced Control For Hvdc Hitachienergy | 4.3 | Nov 1 | Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint |
| CVE-2023-2621 | MA Modular Advanced Control For Hvdc Hitachienergy | 6.5 | Nov 1 | The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system |
| CVE-2023-4816 | AS Asset Suite Hitachienergy | 8.8 | Sep 11 | A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214 |
| CVE-2022-4608 | RF Rtu500 Firmware Hitachienergy | 7.5 | Jul 26 | A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product |
| CVE-2022-2502 | RF Rtu500 Firmware Hitachienergy | 7.5 | Jul 26 | A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product |
| CVE-2023-1711 | FO Foxman-un Hitachienergy | 4.4 | May 30 | A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements |
| CVE-2022-3685 | SD Sdm600 Hitachienergy | 7.2 | Mar 28 | SDM600 software privilege level |
| CVE-2022-3686 | SD Sdm600 Hitachienergy | 9.1 | Mar 28 | SDM600 API permission check |
| CVE-2022-3684 | SD Sdm600 Hitachienergy | 7.5 | Mar 28 | SDM600 endpoint vulnerability |
| CVE-2022-3683 | SD Sdm600 Hitachienergy | 7.5 | Mar 28 | SDM600 API web services authorization validation |
| CVE-2022-3682 | SD Sdm600 Hitachienergy | 8.8 | Mar 28 | SDM600 file permission validation |
| CVE-2022-3353 | FT Fox615 Tego1 Firmware Hitachienergy | 7.5 | Feb 21 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products |
| CVE-2022-2155 | LA Lumada Asset Performance Management Hitachienergy | 7.1 | Jan 12 | A vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role. |
| CVE-2022-3929 | UN Unem Hitachienergy | 9.8 | Jan 5 | Communication between the client and server partially using CORBA over TCP/IP |
| CVE-2022-3928 | FO Foxman-un Hitachienergy | 5.5 | Jan 5 | Hardcoded credential is found in the message queue |
| CVE-2022-3927 | FO Foxman-un Hitachienergy | 9.8 | Jan 5 | The affected products store public and private key that are used to sign and protect custom parameter set files from modification. |
| CVE-2021-40342 | FO Foxman-un Hitachienergy | 9.8 | Jan 5 | Use of default key for encryption |