MicroSCADA X SYS600 vulnerabilities
9 known vulnerabilities in MicroSCADA X SYS600 from Hitachi Energy. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
MicroSCADA X SYS600: Improper Privilege Management
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption.
- 8.8 High severity
MicroSCADA X SYS600: Improper Neutralization of Special Elements in Data Query Logic
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a
- 8.8 High severity
MicroSCADA X SYS600: Improper Limitation of a Pathname to a Restricted Directory
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that a
- 7.5 High severity
FOX61x TEGO1: Improper Resource Shutdown or Release
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop
- 7.8 High severity
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and…
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
- 7.5 High severity
MicroSCADA X SYS600: Improper Validation of Specified Quantity in Input
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too dis
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850…
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in…
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connecti
- 8.8 High severity
MicroSCADA X SYS600: Improper Authorization
Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi En