Hitachi Energy MicroSCADA X SYS600
Successful exploitation of these vulnerabilities could allow an attacker to tamper with the system file, overwrite files, create a denial-of-service condition, or leak file content.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-39205US | — | — | ||
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper… | ||||
| CVE-2025-39204US | — | — | ||
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized i… | ||||
| CVE-2025-39203US | — | — | ||
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting… | ||||
| CVE-2025-39202US | high8.1 | — | ||
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information… | ||||
| CVE-2025-39201US | medium6.1OT elevated | — | ||
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-184-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-184-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationHitachi Energy MicroSCADA Pro/X SYS600
(CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7
- MitigationHitachi Energy MicroSCADA Pro/X SYS600
(CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7
- MitigationHitachi Energy MicroSCADA Pro/X SYS600
(CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7
- MitigationHitachi Energy MicroSCADA Pro/X SYS600
(CVE-2025-39203) Hitachi Energy MicroSCADA X SYS600 versions from 10.5 to 10.6: Update to version 10.7
- MitigationHitachi Energy MicroSCADA Pro/X SYS600
(CVE-2025-39205) Hitachi Energy MicroSCADA X SYS600 versions from 10.3 to 10.6: Update to version 10.7
- FixedHitachi Energy MicroSCADA Pro/X SYS600
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true - FixedHitachi Energy MicroSCADA Pro/X SYS600
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true - FixedHitachi Energy MicroSCADA Pro/X SYS600
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true - FixedHitachi Energy MicroSCADA Pro/X SYS600
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true - FixedHitachi Energy MicroSCADA Pro/X SYS600
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan