What’s Vulnerable › Products
Hitachi Energy MicroSCADA X SYS600 vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your Hitachi Energy MicroSCADA X SYS600 version is affected
Latest Hitachi Energy MicroSCADA X SYS600 vulnerabilities
- CVE-2026-9854 — (CVSS 7.8)
- CVE-2026-9853 — (CVSS 7.8)
- CVE-2026-9852 — (CVSS 7.8)
- CVE-2025-39205 — (CVSS 6.5)
- CVE-2025-39204 — (CVSS 6.5)
- CVE-2025-39203 — (CVSS 6.5)
- CVE-2025-39202 — (CVSS 8.1)
- CVE-2025-39201 — (CVSS 6.1)
- CVE-2024-7941 — (CVSS 4.3)
- CVE-2024-7940 — (CVSS 9.8)
- CVE-2024-4872 — (CVSS 8.8)
- CVE-2024-3982 — (CVSS 8.2)
- CVE-2024-3980 — (CVSS 8.8)
- CVE-2022-3388 — Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products (CVSS 7.8)
- CVE-2022-29922 — A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... (CVSS 7.5)
- CVE-2022-29492 — A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... (CVSS 7.5)
- CVE-2022-2277 — A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ... (CVSS 7.5)
- CVE-2022-1778 — A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ... (CVSS 4.4)
- CVE-2022-29490 — A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. (CVSS 8.8)