Acronis Agent
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other produ…
At a glance
Medium rather than High: exposure is scored at a default because we cannot see your systems or suppliers.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Questions to ask IT
- Are we affected by CVE-2010-2965, CVE-2014-9195 or 4 more, and which of our systems would be?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Nov?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2010-2965- 9.8 · CriticalExploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Not listed
- Elevated attack likelihood (~57.5% in 30 days)
- Not linked from the CVE record
These facts are for CVE-2010-2965. This event covers 5 more CVEs, each with its own record.
No technical write-up beyond these facts and the summary below yet.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of their release.
Read the original reportCISA Cybersecurity Advisories(opens in a new tab)
Part of The PHP2Shell disclosure
Pulse
Last checked 6d ago · Recheck overdue since 4 Nov 2026, 02:06 UK time · 1 quiet check collapsed
in the next 30 days first recorded at 0.7% (lower likelihood signal, not confirmed exploitation).
recorded — watch for changes; not confirmed exploitation.
1 quiet check hidden.
Sources
- CISA Cybersecurity AdvisoriesOfficial
Hitachi Energy RTU500
- CISA ICS AdvisoriesOfficial
Hitachi Energy RTU500
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other produ…
- ProbableSummary fact75% confidence
View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of their release.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2010-2965
- ConfirmedCVE identifier95% confidence
Event involves CVE-2014-9195
- ConfirmedCVE identifier95% confidence
Event involves CVE-2023-46143
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-8065
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-8066
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-8067