CVE-2026-8067
Qualys 위협 인텔 · 심각도 5/5 · QID 591794 · ICS
측면이동
쉬운 악용
대량 데이터 유출
서비스 거부
인증 불필요
원격코드실행
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
타임라인
- NVD 공개
- 첫 보도 CISA ICS Advisories · 히타치 에너지 RTU500
벡터: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H