Description
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level
is not enabled and only users with administrator rights can enable it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | MicroSCADA SYS600 | 10.0 – ≤ 10.5 | — |
Advisories 3
- ICSA-26-260-03 Hitachi Energy FACTS Control Platform (FCP) CISA ICS & IT advisories · Sep 17, 2026
- ICSA-24-331-04 Hitachi Energy MicroSCADA Pro/X SYS600 (Update A) CISA ICS & IT advisories · Mar 25, 2025
- ICSA-25-133-03 Hitachi Energy MACH GWS products CISA ICS & IT advisories · Feb 25, 2025