CVE-2026-1773: High severity hitachienergy Rtu540 Firmware vulnerability

Published Feb 24, 2026
·
Updated

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation.

Affected Software

24 affected components
All of the following
Any of the following
hitachienergy Rtu540 Firmware>=12.7.1<=12.7.7
hitachienergy Rtu540 Firmware>=13.5.1<=13.5.4
hitachienergy Rtu540 Firmware>=13.6.1<=13.6.2
hitachienergy Rtu540 Firmware>=13.7.1<13.7.8
hitachienergy Rtu540 Firmware=13.8.1
hitachienergy Rtu540
All of the following
Any of the following
hitachienergy Rtu560 Firmware>=12.7.1<=12.7.7
hitachienergy Rtu560 Firmware>=13.5.1<=13.5.4
hitachienergy Rtu560 Firmware>=13.6.1<=13.6.2
hitachienergy Rtu560 Firmware>=13.7.1<13.7.8
hitachienergy Rtu560 Firmware=13.8.1
hitachienergy Rtu560
All of the following
Any of the following
hitachienergy Rtu520 Firmware>=12.7.1<=12.7.7
hitachienergy Rtu520 Firmware>=13.5.1<=13.5.4
hitachienergy Rtu520 Firmware>=13.6.1<=13.6.2
hitachienergy Rtu520 Firmware>=13.7.1<13.7.8
hitachienergy Rtu520 Firmware=13.8.1
hitachienergy Rtu520
All of the following
Any of the following
hitachienergy Rtu530 Firmware>=12.7.1<=12.7.7
hitachienergy Rtu530 Firmware>=13.5.1<=13.5.4
hitachienergy Rtu530 Firmware>=13.6.1<=13.6.2
hitachienergy Rtu530 Firmware>=13.7.1<13.7.8
hitachienergy Rtu530 Firmware=13.8.1
hitachienergy Rtu530

Event History

Feb 24, 2026
CVE Published
via MITRE·01:13 PM
Data Sourced
via MITRE·01:13 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-1773?

CVE-2026-1773 has a moderate severity level due to the potential for a Denial of Service during invalid U-format frame reception.

2

How do I fix CVE-2026-1773?

To mitigate CVE-2026-1773, ensure that IEC 60870-5-104 bi-directional functionality is not configured and consider enabling secure communication following IEC 62351-3.

3

Which products are affected by CVE-2026-1773?

CVE-2026-1773 affects multiple versions of Hitachi Energy RTU540, RTU560, RTU520, RTU530 firmware versions 12.7.1 to 13.8.1.

4

Can CVE-2026-1773 be exploited remotely?

Yes, CVE-2026-1773 can potentially be exploited remotely if the affected bi-directional functionality is enabled.

5

What is the impact of CVE-2026-1773?

The primary impact of CVE-2026-1773 is the potential for Denial of Service, affecting the availability of the device's communication functionality.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203