MX
Product
MicroSCADA X SYS600
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 5Low 0
Watch
Add MicroSCADA X SYS600 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3980 | 8.8 | Aug 27 | The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations Affected: 10.0 through 10.5 |
| CVE-2024-4872 | 8.8 | Aug 27 | A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product Affected: 10.0 through 10.5 |
| CVE-2022-29490 | 8.8 | Sep 12 | A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more |
| CVE-2025-39202 | 8.1 | Jun 24 | A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product Affected: 10.0 through 10.6 |
| CVE-2022-3388 | 7.8 | Nov 21 | Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products Affected: 10.0 |
| CVE-2022-3353 | 7.5 | Feb 21 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products Affected: SYS600 10; SYS600 10.1; SYS600 10.1.1; SYS600 10.2; SYS600 10.2.1; SYS600 10.3; +2 more |
| CVE-2022-29492 | 7.5 | Sep 14 | A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more |
| CVE-2022-29922 | 7.5 | Sep 14 | A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more |
| CVE-2022-2277 | 7.5 | Sep 14 | A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ... Affected: 10.2; 10.2.1; 10.3; 10.3.1 |
| CVE-2025-39205 | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product Affected: 10.3 through 10.6 |
| CVE-2025-39204 | 6.5 | Jun 24 | A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product Affected: 10.0 through 10.6 |
| CVE-2025-39203 | 6.5 | Jun 24 | A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product Affected: 10.5 through 10.6 |
| CVE-2025-39201 | 6.1 | Jun 24 | A vulnerability exists in MicroSCADA X SYS600 product Affected: 10.0 through 10.6 |
| CVE-2022-1778 | 4.4 | Sep 14 | A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ... Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more |
Showing 14