VulnerabilityAnalyzed

CVE-2023-5769

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below.

MEDIUM 6.1EPSS 0.41%

Does this matter?

Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to user input being improperly sanitized.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.41% probability · 34th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: hitachienergy/rtu520 firmware · hitachienergy/rtu530 firmware · hitachienergy/rtu540 firmware · hitachienergy/rtu560 firmware
Source: cybersecurity@hitachienergy.com

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=trueVendor Advisory
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000176&languageCode=en&Preview=trueVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.