Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong…

Medium5.9EPSS 0.41%
Published
Updated
Reserved
Assigned by
Hitachi Energy

Description

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length information of APDU or delayed reception of data octets. Only communication link of affected HCI IEC 60870-5-104 is blocked. If attack sequence stops the communication to the previously attacked link gets normal again.

Timeline

  1. ID reserved

    By Hitachi Energy

  2. · 40 days later

    Published

  3. · 8 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-5768, by who scored it
Scored byCVSSScoreVector
Hitachi EnergyCNA (assigner)3.1Medium5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified3.1Medium6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS (exploitation in 30 days)
0.41% · top 64% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Hitachi Energy · RTU500 series

    • affected RTU500 series CMU Firmware version 12.0.1 – 12.0.14
    • affected RTU500 series CMU Firmware version 12.2.1 – 12.2.11
    • affected RTU500 series CMU Firmware version 12.4.1 – 12.4.11
    • affected RTU500 series CMU Firmware version 12.6.1 – 12.6.9
    • affected RTU500 series CMU Firmware version 12.7.1 – 12.7.6
    • affected RTU500 series CMU Firmware version 13.2.1 – 13.2.6
    • affected RTU500 series CMU Firmware version 13.4.1 – 13.4.3

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-5768 badge
[![CVE-2023-5768](https://trackcve.app/badge/CVE-2023-5768.svg)](https://trackcve.app/cve/CVE-2023-5768)

Record last updated .