{"id":"CVE-2024-2617","published":"2024-04-30T12:57:37Z","modified":"2026-03-04T12:02:50Z","title":"A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if…","vendor":"Hitachi Energy","product":"RTU500 series CMU firmware","tier":"core","eol":null,"affectedVersions":[{"vendor":"Hitachi Energy","product":"RTU500 series CMU firmware","versions":[">= 13.2.1, <= 13.2.7",">= 13.4.1, <= 13.4.4",">= 13.5.1, <= 13.5.3"]}],"description":{"text":"A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, \n\nif secure update feature was not enabled on all\nCMUs of a RTU500. If a\nmalicious actor successfully exploits this vulnerability, they\ncould use it to update the RTU500 with unsigned firmware.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":7.2,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00666,"percentile":0.51741,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-358","name":"Improperly Implemented Security Check for Standard"}],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000199&languageCode=en&Preview=true","tags":[]}],"techniques":[],"reports":[{"id":"SRC-bf78188471e664cb6001","title":"Energy Sector Incident Report","publisher":"cert.pl","url":"https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf","date":null,"mentions":[{"quote":"Even if it had been enabled, a vulnerability (CVE ‑2024‑2617)","start":10022,"end":10083}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-27566","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27566","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-04-30","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-2617","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":10.35,"detail":"percentile 0.5174"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.04,"detail":"base score 7.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}