IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 24, 2026 · NIST NVD

   Detected

   IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

2. Jun 17, 2026 · NIST NVD

   Updated

   IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

Affected

• cpe hitachienergy/rtu520 firmwareversion unspecified
• cpe hitachienergy/rtu530 firmwareversion unspecified
• cpe hitachienergy/rtu540 firmwareversion unspecified
• cpe hitachienergy/rtu540 firmware13.8.1
• cpe hitachienergy/rtu560 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-1773

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-1773

  IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerabil

  nvd.nist.gov

References

• Vendor Advisory · publisher.hitachienergy.com