Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-5767

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform…

Medium6.0EPSS 0.39%
Published
Updated
Reserved
Assigned by
Hitachi Energy

Description

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized.

Timeline

  1. ID reserved

    By Hitachi Energy

  2. · 40 days later

    Published

  3. · 8 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-5767, by who scored it
Scored byCVSSScoreVector
Hitachi EnergyCNA (assigner)3.1Medium6.0CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
NVDNVD · Modified3.1Medium6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS (exploitation in 30 days)
0.39% · top 66% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.0.

Weakness

Affected products

  • Hitachi Energy · RTU500

    • affected RTU500 series CMU Firmware version 12.0.1 – 12.0.14
    • affected RTU500 series CMU Firmware version 12.2.1 – 12.2.11
    • affected RTU500 series CMU Firmware version 12.4.1 – 12.4.11
    • affected RTU500 series CMU Firmware version 12.6.1 – 12.6.9
    • affected RTU500 series CMU Firmware version 12.7.1 – 12.7.6
    • affected RTU500 series CMU Firmware version 13.2.1 – 13.2.6
    • affected RTU500 series CMU Firmware version 13.4.1 – 13.4.3

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-5767 badge
[![CVE-2023-5767](https://trackcve.app/badge/CVE-2023-5767.svg)](https://trackcve.app/cve/CVE-2023-5767)

Record last updated .