Hitachi Energy MicroSCADA X SYS600 Product
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-9854US | high7.8 | — | ||
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows h… | ||||
| CVE-2026-9853US | high7.8 | — | ||
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without be… | ||||
| CVE-2026-9852US | high7.8 | — | ||
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending o… | ||||
references
External citations — patches, advisories, analysis.
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- Multiple Vulnerabilities in Hitachi Energy MicroSCADA X SYS600 Productself
- ICS Advisory ICSA-26-293-04 JSONself
- ICS Advisory ICSA-26-293-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- FixedMicroSCADA X SYS600
Update to version 10.8
- FixedMicroSCADA X SYS600
Update to version 10.8
- FixedMicroSCADA X SYS600
Update to version 10.8 and Follow mitigation strategy. Refer to MicroSCADA X SYS00 10.8 Installation and Administration Manual, Section 2.1.7.5 (Mitigation strategy is available for versions 10.3 onwards). Also refer to MicroSCADA X 10.8 Cybersecurity Deployment Guide
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan