CVE-2024-1531

State: Published
Severity: 8.2 High
Published: Mar 27, 2024
Updated: Aug 5, 2024
Reserved: Feb 15, 2024

Description

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H	Hitachi Energy

Weaknesses

CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products

Product	Versions
RTU500 series CMU firmwareHitachi Energy	12.0.1 through 12.0.14Affected 12.2.1 through 12.2.11Affected 12.4.1 through 12.4.11Affected 12.6.1 through 12.6.9Affected 12.7.1 through 12.7.6Affected 13.2.1 through 13.2.6Affected 13.4.1 through 13.4.4Affected 13.5.1 through 13.5.3Affected

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.