Hitachi Energy MACH GWS
view advisory published 2025-09-30
Hitachi Energy is aware of these vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-39205US | — | — | ||
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper… | ||||
| CVE-2025-39203US | — | — | ||
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting… | ||||
| CVE-2025-39201US | medium6.1OT elevated | — | ||
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (6)
- MitigationMACH GWS
Apply general mitigation factors
- MitigationMACH GWS
Apply general mitigation factors
- MitigationMACH GWS
Apply general mitigation factors
- FixedMACH GWS
Upgrade to version 3.5
- FixedMACH GWS
Upgrade to version 3.5
- FixedMACH GWS
Upgrade to version 3.5
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan