What’s Vulnerable › Vulnerabilities

CVE-2022-3388: Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-21 · updated 2026-06-17
• Weakness: CWE-20

Description

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Affected products

• Hitachi Energy MicroSCADA Pro SYS600: 9.0, 9.1, 9.2, 9.3, 9.4
• Hitachi Energy MicroSCADA X SYS600: 10, 10.1, 10.1.1, 10.2, 10.2.1, 10.3 (+2)

References

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1

Get alerted when CVE-2022-3388 or the next vulnerability affects your stack