CVEvulnerability

CVE-2026-1772

5.3 MEDIUM Published 2026-02-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-02-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-280

Description

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.

Affected configurations

• hitachienergy rtu520 firmware (>= 12.7.1 <= 12.7.7) • hitachienergy rtu520 firmware (>= 13.5.1 <= 13.5.4) • hitachienergy rtu520 firmware (>= 13.6.1 <= 13.6.2) • hitachienergy rtu520 firmware (>= 13.7.1 < 13.7.8) • hitachienergy rtu520 firmware 13.8.1 • hitachienergy rtu530 firmware (>= 12.7.1 <= 12.7.7) • hitachienergy rtu530 firmware (>= 13.5.1 <= 13.5.4) • hitachienergy rtu530 firmware (>= 13.6.1 <= 13.6.2) • hitachienergy rtu530 firmware (>= 13.7.1 < 13.7.8) • hitachienergy rtu530 firmware 13.8.1 • hitachienergy rtu540 firmware (>= 12.7.1 <= 12.7.7) • hitachienergy rtu540 firmware (>= 13.5.1 <= 13.5.4) • hitachienergy rtu540 firmware (>= 13.6.1 <= 13.6.2) • hitachienergy rtu540 firmware (>= 13.7.1 < 13.7.8) • hitachienergy rtu540 firmware 13.8.1 • hitachienergy rtu560 firmware (>= 12.7.1 <= 12.7.7) • hitachienergy rtu560 firmware (>= 13.5.1 <= 13.5.4) • hitachienergy rtu560 firmware (>= 13.6.1 <= 13.6.2) • hitachienergy rtu560 firmware (>= 13.7.1 < 13.7.8) • hitachienergy rtu560 firmware 13.8.1

Related

Weakness · CWE (1)

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges weakness

References