Medium severityNVD Advisory· Published May 26, 2026· Updated May 26, 2026

CVE-2026-8479

Description

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.

Affected products

Hitachi/RTU500llm-fuzzy

Patches

Vulnerability mechanics

References

publisher.hitachienergy.com/previewnvd

News mentions

Hitachi Discloses Six CVEs Across Pentaho, RTU500, Ops Center, and HiDraw Products
Vypr Intelligence · May 27, 2026
Hitachi Energy RTU500
CISA ICS Advisories

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000