Login Request a demo
MX
Product
MicroSCADA X SYS600
by Hitachi Energy · last CVE Jun 24, 2025
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 9Medium 5Low 0
Severity
All severities14Critical0High9Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MicroSCADA X SYS600 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3980
8.8
1%
Aug 27
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations
Affected: 10.0 through 10.5
CVE-2024-4872
8.8
0%
Aug 27
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product
Affected: 10.0 through 10.5
CVE-2022-29490
8.8
1%
Sep 12
A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.
Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more
CVE-2025-39202
8.1
0%
Jun 24
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product
Affected: 10.0 through 10.6
CVE-2022-3388
7.8
0%
Nov 21
Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
Affected: 10.0
CVE-2022-3353
7.5
1%
Feb 21
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
Affected: SYS600 10; SYS600 10.1; SYS600 10.1.1; SYS600 10.2; SYS600 10.2.1; SYS600 10.3; +2 more
CVE-2022-29492
7.5
1%
Sep 14
A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ...
Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more
CVE-2022-29922
7.5
1%
Sep 14
A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ...
Affected: 10; 10.1; 10.1.1; 10.2; 10.2.1; 10.3; +1 more
CVE-2022-2277
7.5
1%
Sep 14
A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ...
Affected: 10.2; 10.2.1; 10.3; 10.3.1
Showing 9