Is CVE-2024-8176 known to be exploited?

It is not marked known-exploited in this record.

CVE-2024-8176

Update REB500 firmware to version 8.3.4.0 or later. Apply Hitachi Energy's recommended security practices, including network segmentation, firewall configuration, and physical protection of process control systems. Avoid direct Internet exposure of REB500 devices.

Quick answers

What is CVE-2024-8176?: Update REB500 firmware to version 8.3.4.0 or later. Apply Hitachi Energy's recommended security practices, including network segmentation, firewall configuration, and physical protection of process control systems. Avoid direct Internet exposure of REB500 devices.
How severe is CVE-2024-8176?: medium, CVSS 6.5
Is CVE-2024-8176 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2024-8176 be mitigated?: Update REB500 firmware to version 8.3.4.0 or later. Apply Hitachi Energy's recommended security practices, including network segmentation, firewall configuration, and physical protection of process control systems. Avoid direct Internet exposure of REB500 devices.

CVSS

6.5

Vendor

Hitachi Energy

Published

Oct 30, 2026 · 04:13

Patch

Unknown / not confirmed

Affected products

REB500

Mitigation

Hitachi Energy REB500 Vulnerabilities: Two libexpat Flaws Patched in Version 8.3.4.0

Hitachi Energy has identified two open-source software vulnerabilities affecting the REB500 product line. CVE-2024-8176 is a stack overflow in the libexpat library arising from uncontrolled recursion, and CVE-2025-59375 allows authenticated users to trigger large dynamic memory allocations via crafted XML documents. Both vulnerabilities impact REB500 versions 8.3.3.1 and prior and can result in Denial of Service (DoS). Hitachi Energy has released version 8.3.4.0 containing fixes for both issues.

11m

CVE-2024-8176

Quick answers

Related News

Hitachi Energy REB500 Vulnerabilities: Two libexpat Flaws Patched in Version 8.3.4.0