Advisories · Technology
Hitachi Energy MicroSCADA X SYS600.
Every CVE that names Hitachi Energy MicroSCADA X SYS600 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Improper certificate validation in Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA X SYS600
- Weak cryptography or TLS
- CVSS 8.5 High
Information disclosure in Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA X SYS600
- Information disclosure
- CVSS 7.1 High
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product.
- Hitachi Energy MicroSCADA X SYS600
- CWE-354
- CVSS 8.3 High
Improper privilege management in Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA X SYS600
- Privilege escalation
- CVSS 6.9 Medium
Incorrect default permissions in Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA X SYS600
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Path traversal in Hitachi Energy MicroSCADA X SYS600 and others
- Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA Pro SYS600
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product.
- Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA Pro SYS600
- Other injection
- CVSS 5.9 Medium
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
- Hitachi Energy FOX61x TEGO1
- Hitachi Energy GMS600
- Denial of service
- CVSS 8.8 High
Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
- Hitachi Energy MicroSCADA Pro SYS600
- Hitachi Energy MicroSCADA X SYS600
- CWE-20
- CVSS 5.3 Medium
A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This…
- Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA Pro SYS600
- CWE-20
- CVSS 7.5 High
A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to s…
- Hitachi Energy MicroSCADA X SYS600
- Memory corruption
- CVSS 7.5 High
A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of…
- Hitachi Energy MicroSCADA X SYS600
- Hitachi Energy MicroSCADA Pro SYS600
- CWE-20
- CVSS 7.5 High
A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-serv…
- Hitachi Energy MicroSCADA X SYS600
- CWE-1284
- CVSS 8.5 High
A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.
- Hitachi Energy MicroSCADA X SYS600
- Broken access control