--- title: "Hitachi Energy MicroSCADA SYS600 vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600 type: product description: "Hitachi Energy MicroSCADA SYS600 has 8 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2026-09-03 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Hitachi Energy MicroSCADA SYS600 vulnerabilities Vendor: [Hitachi Energy](https://radicalnotion.ai/vendor/hitachi-energy) - **Published CVEs:** 8 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 4 - **Average CVSS:** 8.0 - **First CVE:** 2024-08-27 - **Latest CVE:** 2026-09-03 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 3 | | High | 3 | | Medium | 2 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-303](https://radicalnotion.ai/cwe/cwe-303) | Incorrect Implementation of Authentication Algorithm | 2 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-294](https://radicalnotion.ai/cwe/cwe-294) | Authentication Bypass by Capture-replay | 1 | | [CWE-1236](https://radicalnotion.ai/cwe/cwe-1236) | Improper Neutralization of Formula Elements in a CSV File | 1 | | [CWE-306](https://radicalnotion.ai/cwe/cwe-306) | Missing Authentication for Critical Function | 1 | | [CWE-601](https://radicalnotion.ai/cwe/cwe-601) | URL Redirection to Untrusted Site ('Open Redirect') | 1 | | [CWE-943](https://radicalnotion.ai/cwe/cwe-943) | Improper Neutralization of Special Elements in Data Query Logic | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2024 | 5 | | 2025 | 0 | | 2026 | 3 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | 10.0 \<= v \<= 10.5 | range | 4 | | 10.0 \<= v \<= 10.7 | range | 2 | | 10.0 \<= v \<= 10.8 | range | 1 | | 10.2 \<= v \<= 10.5 | range | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-9854 | - | high | 8.5 | No | No | No | | CVE-2026-9853 | - | high | 8.5 | No | No | No | | CVE-2026-9852 | - | medium | 4.6 | No | No | No | | CVE-2024-7941 | - | medium | 4.3 | No | No | No | | CVE-2024-7940 | - | critical | 9.8 | No | No | Yes | | CVE-2024-3982 | - | high | 8.2 | No | No | Yes | | CVE-2024-3980 | - | critical | 9.9 | No | No | Yes | | CVE-2024-4872 | - | critical | 9.9 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Hitachi Energy MicroSCADA SYS600 have? Hitachi Energy MicroSCADA SYS600 has 8 published CVE records since 2024. ### How many Hitachi Energy MicroSCADA SYS600 CVEs are in CISA KEV? None of Hitachi Energy MicroSCADA SYS600's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Hitachi Energy MicroSCADA SYS600 vulnerabilities? No Hitachi Energy MicroSCADA SYS600 CVEs currently have a tracked public exploit in this dataset. ### Which versions of Hitachi Energy MicroSCADA SYS600 are affected? 4 distinct Hitachi Energy MicroSCADA SYS600 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Hitachi Energy MicroSCADA SYS600 CVEs? Hitachi Energy MicroSCADA SYS600's CVEs most often map to these CWE weakness types: CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-294 (Authentication Bypass by Capture-replay), CWE-1236 (Improper Neutralization of Formula Elements in a CSV File). ### How many critical Hitachi Energy MicroSCADA SYS600 vulnerabilities are there? Hitachi Energy MicroSCADA SYS600 has 3 critical and 3 high-severity CVEs. ### What is the average severity of Hitachi Energy MicroSCADA SYS600 CVEs? The average CVSS base score across Hitachi Energy MicroSCADA SYS600's scored CVEs is 8.0. ## Other products from this vendor - [MicroSCADA X SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600) (20 CVEs) - [eSOMS](https://radicalnotion.ai/vendor/hitachi-energy/esoms) (19 CVEs) - [FOXMAN-UN](https://radicalnotion.ai/vendor/hitachi-energy/foxman-un) (15 CVEs) - [UNEM](https://radicalnotion.ai/vendor/hitachi-energy/unem) (15 CVEs) - [RTU500](https://radicalnotion.ai/vendor/hitachi-energy/rtu500) (13 CVEs) - [RTU500 series CMU firmware](https://radicalnotion.ai/vendor/hitachi-energy/rtu500-series-cmu-firmware) (13 CVEs) - [Asset Suite](https://radicalnotion.ai/vendor/hitachi-energy/asset-suite) (8 CVEs) - [relion 670](https://radicalnotion.ai/vendor/hitachi-energy/relion-670) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.