CVE-2026-8066
Qualys 위협 인텔 · 심각도 5/5 · QID 591794 · ICS
측면이동
쉬운 악용
대량 데이터 유출
서비스 거부
인증 불필요
원격코드실행
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.
타임라인
- NVD 공개
- 첫 보도 CISA ICS Advisories · 히타치 에너지 RTU500
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H