MX
Product
Microscada X Sys600
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 6Low 0
Watch
Add Microscada X Sys600 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7940 | 9.8 | Aug 27 | The product exposes a service that is intended for local only to all network interfaces without any authentication Affected: 10.2 before 10.6 |
| CVE-2024-4872 | 8.8 | Aug 27 | A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product Affected: 10.0 before 10.6 |
| CVE-2024-3980 | 8.8 | Aug 27 | The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations Affected: 10.0 before 10.6 |
| CVE-2022-29490 | 8.8 | Sep 12 | Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal… Affected: 10.0 through 10.3.1 |
| CVE-2024-3982 | 8.2 | Aug 27 | An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of… Affected: 10.0 before 10.6 |
| CVE-2025-39202 | 8.1 | Jun 24 | A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product Affected: 10.0 before 10.7 |
| CVE-2026-9854 | 7.8 | Sep 3 | A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows… Affected: 10.0 through 10.7 |
| CVE-2026-9853 | 7.8 | Sep 3 | A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without… Affected: 10.0 through 10.8 |
| CVE-2026-9852 | 7.8 | Sep 3 | A CSV injection vulnerability exists in SYS600 Affected: 10.0 through 10.7 |
| CVE-2022-3388 | 7.8 | Nov 21 | An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600 Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +2 more |
| CVE-2022-2277 | 7.5 | Sep 14 | Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when… Affected: 10.2 through 10.3.1 |
| CVE-2022-29922 | 7.5 | Sep 14 | Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in… Affected: 9.0 before 10.4 |
| CVE-2022-29492 | 7.5 | Sep 14 | Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600 Affected: 9.0 before 10.4 |
| CVE-2025-39205 | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product Affected: 10.3 before 10.7 |
| CVE-2025-39204 | 6.5 | Jun 24 | A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product Affected: 10.0 before 10.7 |
| CVE-2025-39203 | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product Affected: 10.5 before 10.7 |
| CVE-2025-39201 | 6.1 | Jun 24 | A vulnerability exists in MicroSCADA X SYS600 product Affected: 10.0 before 10.7 |
| CVE-2022-1778 | 4.4 | Sep 14 | Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start… Affected: 10.0 through 10.3.1 |
| CVE-2024-7941 | 4.3 | Aug 27 | An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL Affected: 10.5 |
Showing 19