CVE-2026-8067
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Risk Assessment
An attacker with valid credentials could remotely reboot the RTU500 device, causing downtime and potential disruption in industrial infrastructure.
Recommendation
Update RTU500 software to a supported version or restrict access to the reset endpoint through proper authorization mechanisms.
Other vulnerabilities in RTU500
See all- CVE-2026-17539Medium
RTU500 has a vulnerability where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI_IEC104 fatal write error, resulting in connection interruption and restart, and ultimately a denial of service for bidirectional IEC 60870-5-104 communication.
- CVE-2026-8479Medium
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable to NULL pointer dereference when a specially crafted sequence of messages is sent for a certain time, causing Denial of Service. The product is only affected if BCI is configured.
Original NVD description (English source)
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS