Description
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability
an attacker must have a valid credential.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | MicroSCADA X SYS600 | 10.0 – ≤ 10.5 | 10.3 vulnerability patch 2025_01 |
| Hitachi Energy | MicroSCADA Pro SYS600 | 9.4 FP2 HF1 – ≤ 9.4 FP2 HF5 | — |
Advisories 3
- ICSA-26-260-03 Hitachi Energy FACTS Control Platform (FCP) CISA ICS & IT advisories · Sep 17, 2026
- ICSA-24-331-04 Hitachi Energy MicroSCADA Pro/X SYS600 (Update A) CISA ICS & IT advisories · Mar 25, 2025
- ICSA-25-133-03 Hitachi Energy MACH GWS products CISA ICS & IT advisories · Feb 25, 2025