Hitachi Energy MicroSCADA Pro/X SYS600 (Update A)
Hitachi Energy is aware of the multiple vulnerabilities that affect the MicroSCADA Pro/X SYS600 product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7941US | medium4.3 | — | ||
An HTTP parameter may contain a URL value and could cause
the web application to redirect the request to the specified URL.
By modifying the URL value to a malicious site, an attac… | ||||
| CVE-2024-7940US | critical9.8OT elevated | — | ||
The product exposes a service that is intended for local only to
all network interfaces without any authentication. | ||||
| CVE-2024-4872US | high8.8 | — | ||
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat… | ||||
| CVE-2024-3982US | high8.2OT elevated | — | ||
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of a… | ||||
| CVE-2024-3980US | high8.8 | — | ||
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names
that are used in filesystem operations. If exploited the vulnerab… | ||||
references
External citations — patches, advisories, analysis.
- Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 productself
- ICS Advisory ICSA-24-331-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-331-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- FixedMicroSCADA Pro/X SYS600
Apply the patch 9.4 FP2 HF6 (Installation of previous FP2 hotfixes are required prior to the installation of HF6)
- FixedMicroSCADA Pro/X SYS600
Apply the patch 9.4 FP2 HF6 (Installation of previous FP2 hotfixes are required prior to the installation of HF6)
- FixedMicroSCADA Pro/X SYS600
Update to version 10.3 vulnerability patch 2025_01 or Update to version 10.6
- FixedMicroSCADA Pro/X SYS600
Update to version 10.3 vulnerability patch 2025_01 or Update to version 10.6
- FixedMicroSCADA Pro/X SYS600
Update to version 10.5 vulnerability patch 2025_01 or Update to version 10.6
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan