CVE-2026-8067
MediumCVSS 6.5Summary
The RTU500 web application has an improper authorization vulnerability that allows an authenticated user to trigger a device reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Risk Assessment
Temporary unavailability of the RTU500 device and disruption of the controlled process may occur. In industrial environments this can impact operational continuity.
Recommendation
Restrict access to the RTU500 web application to trusted users and apply available vendor updates that fix the authorization check.
Other vulnerabilities in RTU500
See all- CVE-2026-17539Medium
RTU500 has a vulnerability where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI_IEC104 fatal write error, resulting in connection interruption and restart, and ultimately a denial of service for bidirectional IEC 60870-5-104 communication.
- CVE-2026-8479Medium
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable to NULL pointer dereference when a specially crafted sequence of messages is sent for a certain time, causing Denial of Service. The product is only affected if BCI is configured.
Original NVD description (English source)
An improper authorization vulnerability in the RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS