CVE-2025-39203
mediumpriority · track · 0EPSS 0.002 · 12 %ileEURUUSEPSS · scored 2026-10-23
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedHitachi Energy MicroSCADA Pro/X SYS600cisa_csaf_ot
For more information see the associated Hitachi Energy PSIRT security advisory 8DBD000218 Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 product.
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000218&languageCode=en&Preview=true - FixedRTU500 series CMU Firmwarecisa_csaf_ot
Update to CMU Firmware version 12.7.8
- FixedMACH GWScisa_csaf_ot
Upgrade to version 3.5
- MitigationHitachi Energy MicroSCADA Pro/X SYS600cisa_csaf_ot
(CVE-2025-39203) Hitachi Energy MicroSCADA X SYS600 versions from 10.5 to 10.6: Update to version 10.7
- MitigationRTU500 series CMU Firmwarecisa_csaf_ot
Follow General Mitigation Factors/Workarounds.
- MitigationMACH GWScisa_csaf_ot
Apply general mitigation factors
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (13)
Products and version ranges known to be affected.
- Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=12.7.1|<=12.7.7cisa_csaf_otUS
- Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=13.4.1|<=13.4.4cisa_csaf_otUS
- Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=13.5.1|<=13.5.3cisa_csaf_otUS
- Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=13.7.1|<=13.7.6cisa_csaf_otUS
- hitachienergy microscada x sys60010.5 → 10.7nvdUScpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:*
advisories (3)
Vendor and ecosystem advisories describing this.
- ICSA-25-184-02Hitachi Energy MicroSCADA X SYS6002025-07-03icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to tamper with the system file, overwrite files, create a denial-of-service condition, or leak file content.
- ICSA-25-259-02Hitachi Energy RTU500 Series2025-09-09icsa · cisa_csaf_otUS
Hitachi Energy is aware of multiple vulnerabilities that affect the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could potentially cause Denial of Service (DoS) impact on RTU500. Please refer to the Recommended Immediate Actions for information about the available mitigation/remediation strategies.
- ICSA-25-289-11Hitachi Energy MACH GWS2025-09-30icsa · cisa_csaf_otUS
Hitachi Energy is aware of these vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-39203cnnvd
- https://publisher.hitachienergy.com/preview?DocumentID=8DBD000218&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://publisher.hitachienergy.com/preview?DocumentID=8DBD000218&LanguageCode=en&DocumentPartId=&Action=Launchenisa_euvd
- https://publisher.hitachienergy.com/preview?DocumentID=8DBD000218&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan