Vendors and CVEs › Vendors › Hitachi Energy
Hitachi Energy: industrial cyber security news and vulnerabilities
3 stories in Industrial Cyber Brief name Hitachi Energy, from Wednesday 21 October 2026 to Friday 30 October 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Hitachi Energy CoreTec flaws allow full device control by authenticated users
Hitachi Energy reported an operating system (OS) command injection flaw and a second flaw called Dirty Frag in CoreTec products.
High
Hitachi Energy MicroSCADA X SYS600 has CSV injection and authentication flaws
Hitachi Energy reported multiple vulnerabilities in MicroSCADA X SYS600, including CSV injection, where malicious formulas can alter spreadsheet data, exfiltrate data or run code, and an incorrect authentication…
Medium
Hitachi Energy warns of flaws in RTU500 CMU firmware
Hitachi Energy reported vulnerabilities in RTU500 series CMU firmware across several listed version ranges. If exploited, they could affect confidentiality, integrity and availability of the product.