CVE-2024-10037 Null dereference in RTU500
Authenticated attackers can cause a denial of service in the RTU500 CMU application via crafted WebSocket messages when test mode is enabled.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10037?
CVE-2024-10037 is a medium-severity vulnerability in Hitachi Energy RTU500, published on 25 Mar 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket connection. An attacker must be properly authenticated and the test mode function of RTU500 must be enabled to exploit this vulnerability.
The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.
Weakness: CWE-476
Which versions are affected by CVE-2024-10037?
How do I fix CVE-2024-10037?
No fix has been published for CVE-2024-10037 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-10037 being exploited?
There is no known exploitation of CVE-2024-10037 in the wild and no public exploit code.
Sources
Also known as GHSA-665f-p6v8-5227.