PT-2025-12796 · Hitachi Energy · Rtu500

Published 2025-03-25 · Updated 2025-03-30 · CVE-2025-1445

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Hitachi Energy RTU500 versions up to 13.7.4/13.7.5

Description A vulnerability exists in the RTU IEC 61850 client and server functionality that could impact availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. The precondition for this issue is that IEC61850 is configured using TLS on the RTU500 device, and it affects the CMU where the IEC61850 stack is configured.

Recommendations For versions up to 13.7.4/13.7.5, consider disabling the TLS renegotiation feature in the IEC61850 client and server functionality as a temporary workaround until a patch is available. Restrict access to the IEC61850 communication when it is active to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-820

Related Identifiers

CVE-2025-1445

Affected Products

Rtu500

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1445 · Security Note
• https://t.me/cvedetector/21094 · Telegram Post
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true · Note
• https://twitter.com/WolfgangSesin/status/1904540333809017282 · Twitter Post
• https://t.me/cvetracker/19880 · Telegram Post
• https://twitter.com/CVEnew/status/1904519266554331531 · Twitter Post
• https://twitter.com/cracbot/status/1906300488724922590 · Twitter Post