Hitachi Energy MicroSCADA X SYS600 Product
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-9854US | high7.8 | — | ||
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows h… | ||||
| CVE-2026-9853US | high7.8 | — | ||
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without be… | ||||
| CVE-2026-9852US | high7.8 | — | ||
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending o… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- [1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practicesself
- Multiple Vulnerabilities in Hitachi Energy MicroSCADA X SYS600 Productself
- ICS Advisory ICSA-26-293-04 JSONself
- ICS Advisory ICSA-26-293-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- MitigationMicroSCADA X SYS600
Follow general mitigation factors/workarounds
- BehobenMicroSCADA X SYS600
Update to version 10.8
- BehobenMicroSCADA X SYS600
Update to version 10.8
- BehobenMicroSCADA X SYS600
Update to version 10.8 and Follow mitigation strategy. Refer to MicroSCADA X SYS00 10.8 Installation and Administration Manual, Section 2.1.7.5 (Mitigation strategy is available for versions 10.3 onwards). Also refer to MicroSCADA X 10.8 Cybersecurity Deployment Guide
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan