CVE-2026-8479
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable to NULL pointer dereference when a specially crafted sequence of messages is sent for a certain time, causing Denial of Service. The product is only affected if BCI is configured.
Risk Assessment
An attacker can cause the RTU500 system to crash, potentially disrupting industrial processes and control. This requires network access and appropriate configuration.
Recommendation
Update the RTU500 firmware to a patched version. If not possible, consider disabling bidirectional mode (BCI) if not required.
Other vulnerabilities in RTU500
See all- CVE-2026-8067Medium
The RTU500 web application has an improper authorization vulnerability that allows an authenticated user to trigger a device reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
- CVE-2026-17539Medium
RTU500 has a vulnerability where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI_IEC104 fatal write error, resulting in connection interruption and restart, and ultimately a denial of service for bidirectional IEC 60870-5-104 communication.
Original NVD description (English source)
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS