Hitachi Energy MicroSCADA X SYS600 Product

SUMMARY Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the...

EUVD-2022-33828

Malicious code in bioql PyPI...

EUVD-2022-25059

Malicious code in bioql PyPI...

Hitachi Energy MicroSCADA X SYS600 Privilege Disclosure

The vulnerability of the software used in the Hitachi Energy MicroSCADA X SYS600 equipment management system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2025-39205

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation...

CVE-2025-39205

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation...

CVE-2025-39205

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation...

CVE-2025-39204

The CVE-2025-39204 entry affects Hitachi MicroSCADA X SYS600, specifically a vulnerability in the Web interface where a malformed filtering query can leak file content via the Web UI. Affected component: the Web interface filtering logic; root cause: malformed queries exposing data. Impact: infor...

CVE-2025-39203

The CVE-2025-39203 entry concerns the IEC 61850 component of Hitachi Energy’s MicroSCADA X SYS600. The connected documents provide concrete details: a crafted IEC 61850-8 message from an IED or remote system can cause a denial of service, resulting in a disconnection loop in SYS600. The issue is ...

PT-2025-26719 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product, where the filtering query can be malformed, leading to unauthorized information leakage to the...

PT-2025-26716 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the Monitor Pro interface of the MicroSCADA X SYS600 product, allowing an authenticated user with low privileges to see and overwrite files. This can...

CVE-2025-39205: Improper Certificate Validation

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation...

CVE-2025-39203: Improper Validation of Integrity Check Value

A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop...

CVE-2025-39202: Improper Privilege Management

A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption...

CVE-2025-39201: Incorrect Default Permissions

A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...

PT-2025-26718

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product, where an IEC 61850-8 crafted message content from IED or remote system can cause a denial of service,...

Hitachi Energy MicroSCADA X SYS600 security vulnerability

Hitachi MicroSCADA X SYS600 is a Hitachi Energy MicroSCADA X SYS600, a data acquisition and monitoring control system primarily used in power systems. A security vulnerability exists in Hitachi Energy MicroSCADA X SYS600 that originates from a denial of service due to improper handling of IEC...

CVE-2025-39204: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...