AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-35533

HIGH · CVSS 7.5 EPSS 0.92%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-26 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.

CVE
CVE-2021-35533
Severity
HIGH
CVSS
7.5
EPSS
0.92%

Original NVD Description

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted message. By default, BCI IEC 60870-5-104 function is disabled (not configured). This issue affects: Hitachi Energy RTU500 series CMU Firmware version 12.0.* (all versions); CMU Firmware version 12.2.* (all versions); CMU Firmware version 12.4.* (all versions).

Related CVEs

Other vulnerabilities affecting the same vendor(s)