ICSA-25-184-02

icsaUScisa_csaf_ot

Hitachi Energy MicroSCADA X SYS600

Advisory ansehen veröffentlicht 2025-07-03

Successful exploitation of these vulnerabilities could allow an attacker to tamper with the system file, overwrite files, create a denial-of-service condition, or leak file content.

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-39205US——
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper…
CVE-2025-39204US——
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized i…
CVE-2025-39203US——
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting…
CVE-2025-39202UShigh8.1—
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information…
CVE-2025-39201USmedium6.1OT erhöht—
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

  • MitigationHitachi Energy MicroSCADA Pro/X SYS600

    (CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7

  • MitigationHitachi Energy MicroSCADA Pro/X SYS600

    (CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7

  • MitigationHitachi Energy MicroSCADA Pro/X SYS600

    (CVE-2025-39201, CVE-2025-39202, CVE-2025-39204) Hitachi Energy MicroSCADA X SYS600 versions from 10.0 to 10.6: Update to version 10.7

  • MitigationHitachi Energy MicroSCADA Pro/X SYS600

    (CVE-2025-39203) Hitachi Energy MicroSCADA X SYS600 versions from 10.5 to 10.6: Update to version 10.7

  • MitigationHitachi Energy MicroSCADA Pro/X SYS600

    (CVE-2025-39205) Hitachi Energy MicroSCADA X SYS600 versions from 10.3 to 10.6: Update to version 10.7

  • BehobenHitachi Energy MicroSCADA Pro/X SYS600

    For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.

    https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
  • BehobenHitachi Energy MicroSCADA Pro/X SYS600

    For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.

    https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
  • BehobenHitachi Energy MicroSCADA Pro/X SYS600

    For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.

    https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
  • BehobenHitachi Energy MicroSCADA Pro/X SYS600

    For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.

    https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
  • BehobenHitachi Energy MicroSCADA Pro/X SYS600

    For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.

    https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan