Hitachi Energy vulnerabilities
We track 58 vulnerabilities in Hitachi Energy products across 36 products. 58 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest Hitachi Energy vulnerabilities
- 7.5 High severity
RTU500 series: Out-of-bounds Write
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is e
- 7.5 High severity
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the…
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license fe
- 8.0 High severity
TXpert Hub CoreTec 4: Improper Neutralization of Special Elements used in an OS Command
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a pa
- 7.2 High severity
SDM600: Improper Authorization
A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SDM600 versions
- 9.1 Critical severity
SDM600: Improper Authorization
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to versio
- 7.5 High severity
SDM600: Improper Resource Shutdown or Release
A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to versio
- 7.5 High severity
SDM600: Improper Authorization
A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having access
- 8.8 High severity
SDM600: Unrestricted Upload of File with Dangerous Type
A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issu
- 7.5 High severity
FOX61x TEGO1: Improper Resource Shutdown or Release
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop
- 7.1 High severity
Lumada APM: Incorrect Authorization
A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that mana
- 9.8 Critical severity
FOXMAN-UN: Cleartext Transmission of Sensitive Information
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This protocol is not encrypted and allows tracing of internal messages. This issue affec
- 9.8 Critical severity
FOXMAN-UN: Use of Hard-coded Credentials
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trust
- 7.8 High severity
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and…
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
- 7.5 High severity
MicroSCADA X SYS600: Improper Validation of Specified Quantity in Input
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too dis
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850…
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in…
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connecti
- 8.8 High severity
MicroSCADA X SYS600: Improper Authorization
Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi En
- 7.5 High severity
RTU500 series CMU Firmware: Improper Validation of Specified Quantity in Input
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the