CVE-2025-59375
CVSS 7.5 HIGH: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that… EPSS 1% (72nd percentile).
Vulnerabilities & Exploits · IoT / OT Attack
An unprivileged user can read user-management information. Malformed IEC 60870-5-104 U-frames can disrupt RTU operation, and authenticated REB500 roles can access or alter unauthorized directories; devices are deployed in the energy sector and other critical infrastructure.
1 source · Mar 3
CVSS 7.5 HIGH: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that… EPSS 1% (72nd percentile).
CVSS 7.5 HIGH: a stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. EPSS 1% (71st percentile).
CVSS 7.5 HIGH: iEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. EPSS 0.5% (39th percentile).
CVSS 5.3 MEDIUM: rTU500 web interface: An unprivileged user can read user management information. EPSS 0.3% (21st percentile).
CISA Advisories
Hitachi Energy RTU500 Product | CISA
Hitachi Energy RTU500 Product Summary Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document.
originalCISA Advisories
Hitachi Energy Relion REB500 Product | CISA
Hitachi Energy Relion REB500 Product Summary Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document.
originalPart of the PlainSec briefing for 2026-03-04
Every edition of this story: Hitachi RTU500 and REB500 firmware flaws require updates