CVE-2026-1773

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-184

Affected software

VendorProductVersions
Hitachi EnergyRTU500 series CMU firmware>= 12.7.1, <= 12.7.7; >= 13.5.1, <= 13.5.4; >= 13.6.1, <= 13.6.2; >= 13.7.1, <= 13.7.7; 13.8.1

References

Timeline

Published
Feb 24, 2026
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-177304.3Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engagCVE-2026-177314.3Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin dCVE-2026-177323.1Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafteCVE-2026-177334.3Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data CVE-2026-177345.4Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTCVE-2026-177358.7Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised CVE-2026-177365.8Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had cCVE-2026-177375.0Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer prCVE-2026-177389.6Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromisedCVE-2026-177394.2Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a CVE-2026-17749.8CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.CVE-2026-177404.3Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML pa
CVE-2026-1773: High severity, CVSS 7.5 | Vulnix