Summary
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
Vulnerabilities 3
-
High 8.5
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the …
-
High 8.5
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their …
-
Medium 4.6
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, …
Revision history
-
#3
Initial CISA Republication of Hitachi Energy PSIRT 8DBD000249 advisory
-
#2
Added researcher’s name under Acknowledgement
-
#1
Initial public release
References
-
[1] Hitachi Energy Notification for Industrial Control Systems Cybersecurity Best Practices
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000235&LanguageCode=en&DocumentPartId=&Action=Launch
-
Multiple Vulnerabilities in Hitachi Energy MicroSCADA X SYS600 Product
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000249&LanguageCode=en&DocumentPartId=&Action=launch
-
ICS Advisory ICSA-26-293-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-04
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b